Provide references for further information: Can you share references or external links related to CVE-2008-0680?

{'tags': ['x_refsource_MISC'], 'url': 'http://hellknights.void.ru/shados/snmp_sploit.c'}, {'name': '5054', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5054'}, {'name': '27599', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27599'}, {'name': 'ADV-2008-0399', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0399'}, {'name': '28762', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28762'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0680?


Explain the CVE ID: What does the identifier CVE-2008-0681 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0681.

SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via the product_id parameter, as demonstrated by a shop/flypage action.


Provide references for further information: Can you share references or external links related to CVE-2008-0681?

{'name': '5041', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5041'}, {'name': '27570', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27570'}, {'name': '20080202 phpShop <= v 0.8.1 Remote SQL injection / Filter Bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487435/100/0/threaded'}, {'name': '3628', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3628'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0681?


Explain the CVE ID: What does the identifier CVE-2008-0682 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0682.

SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attackers to execute arbitrary SQL commands via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0682?

{'name': '5039', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5039'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://pierre.sudarovich.free.fr/index.php/2006/02/28/ajax-shoutbox/'}, {'name': '27583', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27583'}, {'name': '28767', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28767'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0682?


Explain the CVE ID: What does the identifier CVE-2008-0683 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0683.

SQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0683?

{'name': '5053', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5053'}, {'name': '27586', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27586'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0683?


Explain the CVE ID: What does the identifier CVE-2008-0684 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0684.

Cross-site scripting (XSS) vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to inject arbitrary web script or HTML via the CatID parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0684?

{'name': '28773', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28773'}, {'name': '27574', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27574'}, {'name': '20080201 ITech Classifieds Multiple Remote  Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=120197273611835&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0684?


Explain the CVE ID: What does the identifier CVE-2008-0685 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0685.

SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0685?


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0685?


Explain the CVE ID: What does the identifier CVE-2008-0686 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0686.

SQL injection vulnerability in index.php in the NeoReferences (com_neoreferences) 1.3.1 and 1.3.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0686?

{'name': 'neoreferences-index-sql-injection(40167)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40167'}, {'name': '5034', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5034'}, {'name': '28736', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28736'}, {'name': '27564', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27564'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0686?


Explain the CVE ID: What does the identifier CVE-2008-0687 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0687.

Cross-site scripting (XSS) vulnerability in siteadmin/editor_files/includes/load_message.php in the Youtube Clone Script allows remote attackers to inject arbitrary web script or HTML via the lang[please_wait] parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0687?

{'name': '3635', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3635'}, {'name': '28775', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28775'}, {'name': '20080201 Youtube Clone Xross Site Scripting (load_message.php)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487432/100/0/threaded'}, {'name': '27598', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27598'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0687?


Explain the CVE ID: What does the identifier CVE-2008-0688 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0688.

Cross-site scripting (XSS) vulnerability in catalog.php in Smartscript Domain Trader 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a viewcategory action.


Provide references for further information: Can you share references or external links related to CVE-2008-0688?

{'name': '20080202 Domain Trader v2.0 Xss Vulnerable', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487433/100/0/threaded'}, {'name': '28774', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28774'}, {'name': '27571', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27571'}, {'name': '3633', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3633'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0688?


Explain the CVE ID: What does the identifier CVE-2008-0689 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0689.

SQL injection vulnerability in index.php in the Marketplace (com_marketplace) 1.1.1 and 1.1.1-pl1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show_category action.


Provide references for further information: Can you share references or external links related to CVE-2008-0689?

{'name': '27600', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27600'}, {'name': '5055', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5055'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0689?


Explain the CVE ID: What does the identifier CVE-2008-0690 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0690.

SQL injection vulnerability in index.php in the mosDirectory (com_directory) 2.3.2 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a viewcat action.


Provide references for further information: Can you share references or external links related to CVE-2008-0690?

{'name': '5047', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5047'}, {'name': '27585', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27585'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0690?


Explain the CVE ID: What does the identifier CVE-2008-0691 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0691.

Multiple cross-site scripting (XSS) vulnerabilities in admin_panel.php in the Simon Elvery WP-Footnotes 2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) wp_footnotes_current_settings[priority], (2) wp_footnotes_current_settings[style_rules], (3) wp_footnotes_current_settings[pre_footnotes], and (4) wp_footnotes_current_settings[post_footnotes] parameters.


Provide references for further information: Can you share references or external links related to CVE-2008-0691?

{'name': '3634', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3634'}, {'name': '28772', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28772'}, {'name': 'wpfootnotes-adminpanel-security-bypass(40218)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40218'}, {'name': '20080201 Wordpress Pluging wp-footnotes 2.2 (admin_panel.php) Multiple Vulnerabilites', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487430/100/0/threaded'}, {'name': '27572', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27572'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0691?


Explain the CVE ID: What does the identifier CVE-2008-0692 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0692.

SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote attackers to execute arbitrary SQL commands via the item_id parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0692?

{'name': '5056', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5056'}, {'name': '27601', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27601'}, {'name': '28780', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28780'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0692?


Explain the CVE ID: What does the identifier CVE-2008-0693 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0693.

Stack-based buffer overflow in PQCore.exe in Print Manager Plus 2008 Client Billing and Authentication 7.0.127.16 allows remote attackers to cause a denial of service (service outage) via a series of long packets to TCP port 48101.


Provide references for further information: Can you share references or external links related to CVE-2008-0693?

{'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/pqcorez-adv.txt'}, {'name': '27604', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27604'}, {'name': 'ADV-2008-0407', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0407'}, {'name': '28741', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28741'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0693?


Explain the CVE ID: What does the identifier CVE-2008-0694 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0694.

Cross-site scripting (XSS) vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.


Provide references for further information: Can you share references or external links related to CVE-2008-0694?

{'name': '28744', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28744'}, {'name': 'ADV-2008-0397', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0397'}, {'name': '27595', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27595'}, {'name': 'SE31823', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=nas22f5a0f082f6821c4862573e10041f7bd'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0694?


Explain the CVE ID: What does the identifier CVE-2008-0695 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0695.

SQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a showtopic action.


Provide references for further information: Can you share references or external links related to CVE-2008-0695?

{'name': '5040', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5040'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0695?


Explain the CVE ID: What does the identifier CVE-2008-0696 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0696.

IBM DB2 UDB before 8.2 Fixpak 16 does not properly check authorization for the ALTER TABLE statement, which has unknown impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0696?

{'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT'}, {'name': '28771', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28771'}, {'name': 'ADV-2008-0401', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0401'}, {'name': 'IZ07337', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1IZ07337'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0696?


Explain the CVE ID: What does the identifier CVE-2008-0697 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0697.

Unspecified vulnerability in DB2PD in IBM DB2 UDB before 8.2 Fixpak 16 allows local users to gain root privileges via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0697?

{'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT'}, {'name': 'IZ03546', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1IZ03546'}, {'name': '28771', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28771'}, {'name': 'ADV-2008-0401', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0401'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0697?


Explain the CVE ID: What does the identifier CVE-2008-0698 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0698.

Buffer overflow in the DAS server in IBM DB2 UDB before 8.2 Fixpak 16 has unknown attack vectors, and an impact probably involving "invalid memory access."


Provide references for further information: Can you share references or external links related to CVE-2008-0698?

{'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT'}, {'name': '27681', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27681'}, {'name': '28771', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28771'}, {'name': 'ADV-2008-0401', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0401'}, {'name': 'IZ05496', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1IZ05496'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0698?


Explain the CVE ID: What does the identifier CVE-2008-0699 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0699.

Unspecified vulnerability in the ADMIN_SP_C procedure (SYSPROC.ADMIN_SP_C) in IBM DB2 UDB before 8.2 Fixpak 16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unspecified attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0699?

{'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT'}, {'name': '20080418 Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary code execution in ADMIN_SP_C/ADMIN_SP_C2 procedures', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/491075/100/0/threaded'}, {'name': 'IZ06972', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06972'}, {'name': 'IZ06973', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06973'}, {'name': 'IZ10917', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1IZ10917'}, {'name': '28771', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28771'}, {'name': 'ADV-2008-0401', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0401'}, {'name': '29784', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29784'}, {'name': '29022', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29022'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.appsecinc.com/resources/alerts/db2/2008-02.shtml'}, {'name': '41795', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/41795'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0699?


Explain the CVE ID: What does the identifier CVE-2008-0700 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0700.

Cross-site scripting (XSS) vulnerability in search.php in Crux Software CruxCMS 3.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0700?

{'name': '27588', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27588'}, {'tags': ['x_refsource_MISC'], 'url': 'http://downloads.securityfocus.com/vulnerabilities/exploits/27588.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0700?


Explain the CVE ID: What does the identifier CVE-2008-0701 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0701.

ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via activation of a new item, possibly involving addition of arbitrary new content.


Provide references for further information: Can you share references or external links related to CVE-2008-0701?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=573088'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jira.magnolia.info/browse/MAGNOLIA-2021'}, {'name': '27608', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27608'}, {'name': '28745', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28745'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0701?


Explain the CVE ID: What does the identifier CVE-2008-0702 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0702.

Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote attackers to cause a denial of service (daemon crash or hang) and possibly execute arbitrary code via a long argument to the (1) USER or (2) PASS command, different vectors than CVE-2004-1641.


Provide references for further information: Can you share references or external links related to CVE-2008-0702?

{'name': '3639', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3639'}, {'name': 'ADV-2008-0393', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0393'}, {'name': '20080201 Titan FTP Server Remote Heap Overflow (USER/PASS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487431/100/0/threaded'}, {'name': '5036', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5036'}, {'name': '28760', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28760'}, {'name': '27568', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27568'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0702?


Explain the CVE ID: What does the identifier CVE-2008-0703 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0703.

Multiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) permalink or (2) section parameter to index.php, possibly involving includes/entries.inc.php and other files included by index.php.


Provide references for further information: Can you share references or external links related to CVE-2008-0703?

{'name': '20080131 sflog! 0.96 remote file disclosure vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487368/100/0/threaded'}, {'name': '5027', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5027'}, {'name': 'sflog-blog-index-directory-traversal(40115)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40115'}, {'name': '3629', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3629'}, {'name': '27541', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27541'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0703?


Explain the CVE ID: What does the identifier CVE-2008-0704 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0704.

Unspecified vulnerability in the SSH server in HP OpenVMS TCP/IP Services on OpenVMS on the Alpha platform with 5.4 before ECO 7, and on the Integrity and Alpha platforms with 5.5 before ECO 3 and 5.6 before ECO 2, allows remote attackers to obtain unspecified access via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0704?

{'name': '1019727', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019727'}, {'name': 'HPSBOV02278', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01414022'}, {'name': 'SSRT071479', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01414022'}, {'name': 'ADV-2008-1009', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1009'}, {'name': '29566', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29566'}, {'name': 'openvms-sshserver-unauthorized-access(41519)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41519'}, {'name': '28486', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28486'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0704?


Explain the CVE ID: What does the identifier CVE-2008-0705 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0705.


Provide references for further information: Can you share references or external links related to CVE-2008-0705?


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0705?


Explain the CVE ID: What does the identifier CVE-2008-0706 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0706.

Unspecified vulnerability in the BIOS F.26 and earlier for the HP Compaq Notebook PC allows physically proximate attackers to obtain privileged access via unspecified vectors, possibly involving an authentication bypass of the power-on password.


Provide references for further information: Can you share references or external links related to CVE-2008-0706?

{'name': '28495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28495'}, {'name': 'HPSBGN02319', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=120672270224094&w=2'}, {'name': '1019730', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1019730'}, {'name': 'SSRT080027', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=120672270224094&w=2'}, {'name': 'ADV-2008-1043', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1043/references'}, {'name': 'compaq-pcbios-security-bypass(41521)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41521'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0706?


Explain the CVE ID: What does the identifier CVE-2008-0707 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0707.

HP StorageWorks Library and Tape Tools (LTT) before 4.5 SR1 on HP-UX B.11.11 and B.11.23 allows local users to gain privileges via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0707?

{'name': '28314', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28314'}, {'name': 'hp-storageworks-unspecified-priv-escalation(41337)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41337'}, {'name': '29442', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29442'}, {'name': 'ADV-2008-0926', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0926/references'}, {'name': '1019651', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1019651'}, {'name': 'SSRT080029', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'https://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01399648'}, {'name': 'HPSBST02321', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'https://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01399648'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0707?


Explain the CVE ID: What does the identifier CVE-2008-0708 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0708.

HP USB 2.0 Floppy Drive Key product options (1) 442084-B21 and (2) 442085-B21 for certain HP ProLiant servers contain the (a) W32.Fakerecy and (b) W32.SillyFDC worms, which might be launched if the server does not have up-to-date detection.


Provide references for further information: Can you share references or external links related to CVE-2008-0708?

{'name': 'hp-usbfloppydrivekey-weak-security(41648)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41648'}, {'name': 'SSRT080032', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=120732648630458&w=2'}, {'name': '1019785', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1019785'}, {'name': 'HPSBMA02323', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=120732648630458&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0708?


Explain the CVE ID: What does the identifier CVE-2008-0709 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0709.

Multiple unspecified vulnerabilities in HP Select Identity 4.00, 4.01, 4.11, 4.12, 4.13, and 4.20 allow remote authenticated users to access other user accounts via unknown vectors, a different issue than CVE-2008-0214.


Provide references for further information: Can you share references or external links related to CVE-2008-0709?

{'name': '1019746', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1019746'}, {'name': '29643', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29643'}, {'name': 'ADV-2008-1072', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1072/references'}, {'name': 'HPSBMA02317', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01391833'}, {'name': 'SSRT080026', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01391833'}, {'name': 'hpselectidentity-useraccount-unauth-access(41583)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41583'}, {'name': '28558', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28558'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0709?


Explain the CVE ID: What does the identifier CVE-2008-0710 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0710.


Provide references for further information: Can you share references or external links related to CVE-2008-0710?


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0710?


Explain the CVE ID: What does the identifier CVE-2008-0711 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0711.

Unspecified vulnerability in the embedded management console in HP iLO-2 Management Processors (iLO-2 MP), as used in Integrity Servers rx2660, rx3600, and rx6600, and Integrity Blade Server model bl860c, allows remote attackers to cause a denial of service via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0711?

{'name': 'HPSBMA02327', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=120766789901792&w=2'}, {'name': '3804', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3804'}, {'name': 'ADV-2008-1132', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1132/references'}, {'name': 'hp-integrityserver-ilo2mp-console-dos(41696)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41696'}, {'name': '29718', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29718'}, {'name': '1019795', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019795'}, {'name': 'SSRT071455', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=120766789901792&w=2'}, {'name': '28673', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28673'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0711?


Explain the CVE ID: What does the identifier CVE-2008-0712 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0712.

Unspecified vulnerability in the HP HPeDiag (aka eSupportDiagnostics) ActiveX control in hpediag.dll in HP Software Update 4.000.009.002 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors.  NOTE: this might overlap CVE-2007-6513.


Provide references for further information: Can you share references or external links related to CVE-2008-0712?

{'name': 'HPSBGN02333', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=120907060320901&w=2'}, {'name': '28929', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28929'}, {'name': 'ADV-2008-1356', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1356/references'}, {'name': 'SSRT080031', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=120907060320901&w=2'}, {'name': 'hpsoftware-hpediag-code-execution(42003)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/42003'}, {'name': '29966', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29966'}, {'name': '1019922', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019922'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0712?


Explain the CVE ID: What does the identifier CVE-2008-0713 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0713.

Unspecified vulnerability in the FTP server for HP-UX B.11.11, B.11.23, and B.11.31 allows remote authenticated users to cause a denial of service (FTP server outage) via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0713?

{'name': 'oval:org.mitre.oval:def:5289', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5289'}, {'name': '1020005', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1020005'}, {'name': '30195', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30195'}, {'name': '29160', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/29160'}, {'name': 'ADV-2008-1475', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1475/references'}, {'name': 'HPSBUX02334', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01446326'}, {'name': 'SSRT071403', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01446326'}, {'name': 'hpux-ftp-dos(42357)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/42357'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0713?


Explain the CVE ID: What does the identifier CVE-2008-0714 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0714.

SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL commands via the username parameter in a lost_password_go action.


Provide references for further information: Can you share references or external links related to CVE-2008-0714?

{'name': 'mihalism-users-sql-injection(40289)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40289'}, {'name': '5074', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5074'}, {'name': '27651', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27651'}, {'name': '28803', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28803'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0714?


Explain the CVE ID: What does the identifier CVE-2008-0715 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0715.

Buffer overflow in ACDSee Photo Manager 8.1, 9.0, and 10.0 allows user-assisted remote attackers to execute arbitrary code via a malformed XBM file.  NOTE: this might be the same as CVE-2007-6009.


Provide references for further information: Can you share references or external links related to CVE-2008-0715?

{'name': 'ADV-2008-0443', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0443'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+AcdSee+Photo+Manager'}, {'name': '28797', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28797'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0715?


Explain the CVE ID: What does the identifier CVE-2008-0716 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0716.

The agent in Symantec Altiris Notification Server before 6.0 SP3 R7 allows local users to gain privileges via a "Shatter" style attack.


Provide references for further information: Can you share references or external links related to CVE-2008-0716?

{'name': '28832', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28832'}, {'name': 'ADV-2008-0444', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0444'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2008.02.06.html'}, {'name': '1019313', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019313'}, {'name': '27645', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27645'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0716?


Explain the CVE ID: What does the identifier CVE-2008-0717 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0717.

Cross-site scripting (XSS) vulnerability in Caching Proxy (CP) 5.1 through 6.1 in IBM WebSphere Edge Server, when CGI mapping rules are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger injection into an error response.


Provide references for further information: Can you share references or external links related to CVE-2008-0717?

{'name': 'ADV-2008-0446', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0446'}, {'name': '27665', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27665'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg21294776'}, {'name': '1019315', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019315'}, {'name': '28785', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28785'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0717?


Explain the CVE ID: What does the identifier CVE-2008-0718 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0718.

Unspecified vulnerability in the USB Mouse STREAMS module (usbms) in Sun Solaris 9 and 10, when 64-bit mode is enabled, allows local users to cause a denial of service (panic) via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0718?

{'name': 'ADV-2008-0451', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0451'}, {'name': '27773', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27773'}, {'name': '28921', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28921'}, {'name': 'oval:org.mitre.oval:def:5474', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5474'}, {'name': '201316', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-201316-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0718?


Explain the CVE ID: What does the identifier CVE-2008-0719 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0719.

SQL injection vulnerability in customer_testimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allows remote attackers to execute arbitrary SQL commands via the testimonial_id parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0719?

{'name': '28831', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28831'}, {'name': '27664', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27664'}, {'name': '5075', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5075'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0719?


Explain the CVE ID: What does the identifier CVE-2008-0720 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0720.

Cross-site scripting (XSS) vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 allows remote attackers to inject arbitrary web script or HTML via the search parameter to webmin_search.cgi (aka the search section), and possibly other components accessed through a "search box" or "open file box." NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0720?

{'name': '20080206 Re: Tested on Webmin 1.390', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487678/100/0/threaded'}, {'name': '28827', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28827'}, {'name': '27662', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27662'}, {'name': '20080206 Tested on Webmin 1.390', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487656/100/0/threaded'}, {'name': 'ADV-2008-0450', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0450'}, {'tags': ['x_refsource_MISC'], 'url': 'http://forum.aria-security.net/showthread.php?t=511'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0720?


Explain the CVE ID: What does the identifier CVE-2008-0721 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0721.

SQL injection vulnerability in index.php in the Sermon (com_sermon) 0.2 component for Mambo allows remote attackers to execute arbitrary SQL commands via the gid parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0721?

{'name': '27673', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27673'}, {'name': '5076', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5076'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0721?


Explain the CVE ID: What does the identifier CVE-2008-0722 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0722.

Cross-site scripting (XSS) vulnerability in index.php in Pagetool 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the search_term parameter in a pagetool_search action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0722?

{'name': '27653', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27653'}, {'name': '4983', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4983'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0722?


Explain the CVE ID: What does the identifier CVE-2008-0723 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0723.

Cross-site scripting (XSS) vulnerability in mynews.inc.php in MyNews 1.6.4, and other earlier 1.6.x versions, allows remote attackers to inject arbitrary web script or HTML via the hash parameter in an admin action to index.php, a different vulnerability than CVE-2006-2208.1.


Provide references for further information: Can you share references or external links related to CVE-2008-0723?

{'name': '27652', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27652'}, {'name': '20080207 Re: MyNews 1.6.X HTML/JS Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=120235668406688&w=2'}, {'name': '20080206 MyNews 1.6.X HTML/JS Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=120232523420188&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0723?


Explain the CVE ID: What does the identifier CVE-2008-0724 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0724.

The Everything Development Engine in The Everything Development System Pre-1.0 and earlier stores passwords in cleartext in a database, which makes it easier for context-dependent attackers to obtain access to user accounts.


Provide references for further information: Can you share references or external links related to CVE-2008-0724?

{'name': '20080201 The Everything Development System - SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487436/100/0/threaded'}, {'name': '3631', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3631'}, {'name': '5037', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5037'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0724?


Explain the CVE ID: What does the identifier CVE-2008-0725 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0725.

Multiple heap-based buffer overflows in the (1) FTP service and (2) administration service in Titan FTP Server 6.0.5.549 allow remote attackers to cause a denial of service (daemon hang) and possibly execute arbitrary code via a long command.  NOTE: the USER and PASS commands for the FTP service are covered by CVE-2008-0702.


Provide references for further information: Can you share references or external links related to CVE-2008-0725?

{'name': '28760', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28760'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0725?


Explain the CVE ID: What does the identifier CVE-2008-0726 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0726.

Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to the printSepsWithParams, which triggers memory corruption.


Provide references for further information: Can you share references or external links related to CVE-2008-0726?

{'name': 'SUSE-SA:2008:009', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb08-13.html'}, {'name': 'ADV-2008-1966', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1966/references'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/advisories/apsa08-01.html'}, {'name': '28983', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28983'}, {'name': '239286', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1'}, {'name': '20080211 ZDI-08-004: Adobe AcrobatReader Javascript for PDF Integer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/488000/100/0/threaded'}, {'name': 'GLSA-200803-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200803-01.xml'}, {'name': '29065', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29065'}, {'name': '30840', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30840'}, {'name': '29205', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29205'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-08-004.html'}, {'name': 'oval:org.mitre.oval:def:10957', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10957'}, {'name': 'RHSA-2008:0144', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2008-0144.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0726?


Explain the CVE ID: What does the identifier CVE-2008-0727 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0727.

Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server (IDS) 7.x through 11.x allow (1) remote attackers to execute arbitrary code via a long password and (2) remote authenticated users to execute arbitrary code via a long DBPATH value.


Provide references for further information: Can you share references or external links related to CVE-2008-0727?

{'name': 'ADV-2008-0860', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0860'}, {'name': 'ibm-informix-oninit-bo(41203)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41203'}, {'name': '28198', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28198'}, {'name': '20080313 ZDI-08-012: IBM Informix Dynamic Server Authentication Password Stack Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489548/100/0/threaded'}, {'name': 'ibm-informix-oninit-dbpath-bo(41202)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41202'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-08-012/'}, {'name': 'IC55208', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1IC55208'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-08-011/'}, {'name': '20080313 ZDI-08-011: IBM Informix Dynamic Server DBPATH Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489547/100/0/threaded'}, {'name': 'IC55210', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1IC55210'}, {'name': 'IC55207', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1IC55207'}, {'name': 'IC55209', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1IC55209'}, {'name': '29272', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29272'}, {'name': '3749', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3749'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0727?


Explain the CVE ID: What does the identifier CVE-2008-0728 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0728.

The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."


Provide references for further information: Can you share references or external links related to CVE-2008-0728?

{'name': 'MDVSA-2008:088', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2008:088'}, {'name': '29048', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29048'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/techcenter/psdb/512985d2cd3090bfb93dcb7b551179cf.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=575703'}, {'name': '29026', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29026'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=209915'}, {'name': 'ADV-2008-0924', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0924/references'}, {'name': 'ADV-2008-0503', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0503'}, {'name': '29420', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29420'}, {'name': 'APPLE-SA-2008-03-18', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html'}, {'name': 'SUSE-SR:2008:004', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html'}, {'name': 'clamav-mewc-heap-corruption(40474)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40474'}, {'name': 'ADV-2008-0606', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0606'}, {'name': '28907', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28907'}, {'name': 'GLSA-200802-09', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200802-09.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=307562'}, {'name': '29001', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29001'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kolab.org/security/kolab-vendor-notice-19.txt'}, {'name': '29060', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29060'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0728?


Explain the CVE ID: What does the identifier CVE-2008-0729 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0729.

Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service (memory exhaustion and device crash) via certain JavaScript code that constructs a long string and an array containing long string elements, possibly a related issue to CVE-2006-3677.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0729?

{'name': 'iphone-mobilesafari-dos(39998)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39998'}, {'name': '20080205 Apple iPhone 1.1.3 remote DoS exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487607/100/0/threaded'}, {'name': '4978', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4978'}, {'name': '3630', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3630'}, {'name': '20080519 Re: Apple iPhone 1.1.3 remote DoS exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/492225/100/0/threaded'}, {'name': '27442', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27442'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0729?


Explain the CVE ID: What does the identifier CVE-2008-0730 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0730.

The (1) Simplified Chinese, (2) Traditional Chinese, (3) Korean, and (4) Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under (a) .iiim/le and (b) .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of other users.


Provide references for further information: Can you share references or external links related to CVE-2008-0730?

{'name': 'ADV-2008-0452', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0452'}, {'name': '28931', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28931'}, {'name': '27770', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27770'}, {'name': 'oval:org.mitre.oval:def:5545', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5545'}, {'name': '201315', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-201315-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0730?


Explain the CVE ID: What does the identifier CVE-2008-0731 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0731.

The Linux kernel before 2.6.18.8-0.8 in SUSE openSUSE 10.2 does not properly handle failure of an AppArmor change_hat system call, which might allow attackers to trigger the unconfining of an apparmored task.


Provide references for further information: Can you share references or external links related to CVE-2008-0731?

{'name': '28806', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28806'}, {'name': 'SUSE-SA:2008:006', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0731?


Explain the CVE ID: What does the identifier CVE-2008-0732 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0732.

The init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown operation, which might allow local users to obtain access to unspecified files or directories.


Provide references for further information: Can you share references or external links related to CVE-2008-0732?

{'name': '28838', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28838'}, {'name': 'SUSE-SR:2008:003', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0732?


Explain the CVE ID: What does the identifier CVE-2008-0733 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0733.

SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page.


Provide references for further information: Can you share references or external links related to CVE-2008-0733?

{'name': 'counterstrikeportals-index-sql-injection(40520)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40520'}, {'name': '27747', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27747'}, {'name': '20080212 Kommentare zum Download script SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487988/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0733?


Explain the CVE ID: What does the identifier CVE-2008-0734 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0734.

SQL injection vulnerability in class_auth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the cuid cookie parameter to admin.php.


Provide references for further information: Can you share references or external links related to CVE-2008-0734?

{'name': '5088', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5088'}, {'name': '27710', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27710'}, {'name': 'limbo-admin-sql-injection(40415)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40415'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0734?


Explain the CVE ID: What does the identifier CVE-2008-0735 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0735.

SQL injection vulnerability in mod/gallery/ajax/gallery_data.php in AuraCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the albums parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0735?

{'name': '5105', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5105'}, {'name': '27764', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27764'}, {'name': '28950', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28950'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0735?


Explain the CVE ID: What does the identifier CVE-2008-0736 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0736.

admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and possibly other 4.x and 3.x versions, allows remote attackers to obtain the path via a certain value of the FedExAccount parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0736?

{'name': '27454', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27454'}, {'name': 'ecommerce-sashipfedexmeter-path-disclosure(39941)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39941'}, {'name': '4988', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4988'}, {'name': 'ADV-2008-0314', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0314'}, {'name': '20080125 [CandyPress] eCommerce suite (SQL Injection + XSS + Path Disclosure)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487058/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1'}, {'name': '3600', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3600'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0736?


Explain the CVE ID: What does the identifier CVE-2008-0737 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0737.

SQL injection vulnerability in admin/utilities_ConfigHelp.asp in CandyPress (CP) 4.1.1.26, and other 4.x and 3.x versions, allows remote attackers to execute arbitrary SQL commands via the helpfield parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0737?

{'name': '27454', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27454'}, {'name': '28662', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28662'}, {'name': '4988', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4988'}, {'name': 'ADV-2008-0314', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0314'}, {'name': '20080125 [CandyPress] eCommerce suite (SQL Injection + XSS + Path Disclosure)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487058/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1'}, {'name': '3600', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3600'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0737?


Explain the CVE ID: What does the identifier CVE-2008-0738 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0738.

Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary SQL commands via the (1) idcust parameter to (a) ajax_getTiers.asp and (b) ajax_getCust.asp in ajax/, and the (2) tableName parameter to (c) ajax/ajax_tableFields.asp.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0738?

{'name': '28662', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28662'}, {'name': 'ADV-2008-0314', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0314'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0738?


Explain the CVE ID: What does the identifier CVE-2008-0739 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0739.

SQL injection vulnerability in admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and earlier 4.x and 3.x versions, allows remote attackers to execute arbitrary SQL commands via the FedExAccount parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0739?


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0739?


Explain the CVE ID: What does the identifier CVE-2008-0740 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0740.

IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) and 6.1 before Fix Pack 15 (6.1.0.15) writes unspecified cleartext information to http_plugin.log, which might allow local users to obtain sensitive information by reading this file.


Provide references for further information: Can you share references or external links related to CVE-2008-0740?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg27007951'}, {'name': 'PK48785', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1PK48785'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg27006876'}, {'name': '42878', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/42878'}, {'name': '27400', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27400'}, {'name': 'ADV-2008-0241', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0241'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0740?


Explain the CVE ID: What does the identifier CVE-2008-0741 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0741.

Unspecified vulnerability in the PropFilePasswordEncoder utility in IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) has unknown impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0741?

{'name': '1019254', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1019254'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg27006876'}, {'name': '27400', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27400'}, {'name': 'ADV-2008-0241', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0241'}, {'name': '28588', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28588'}, {'name': 'PK52709', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK52709&uid=swg1PK58871&loc=en_US&cs=utf-8&lang='}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0741?


Explain the CVE ID: What does the identifier CVE-2008-0742 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0742.

Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a .. (dot dot) in the (1) subpage parameter in (a) categories.inc.php, (b) news.inc.php, (c) other.inc.php, (d) permissions.inc.php, (e) templates.inc.php, and (f) users.inc.php in pnadmin/; and (2) the page parameter to (g) pnadmin/index.php.  NOTE: vector 2 is only exploitable by administrators.


Provide references for further information: Can you share references or external links related to CVE-2008-0742?

{'name': '5082', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5082'}, {'name': '3647', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3647'}, {'name': '27688', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27688'}, {'name': '20080208 [DSECRG-08-014] Multiple LFI in PowerNews (Newsscript) 2.5.6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487773/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0742?


Explain the CVE ID: What does the identifier CVE-2008-0743 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0743.

PHP remote file inclusion vulnerability in members_help.php in Joovili 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hlp parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0743?

{'name': '20080207 Joovili <= v.2.1 (members_help.php) Remote File İnclude Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487779/100/0/threaded'}, {'name': '3640', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3640'}, {'name': '27693', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27693'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0743?


Explain the CVE ID: What does the identifier CVE-2008-0744 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0744.

SQL injection vulnerability in user_login.asp in PreProjects.com Pre Hotels & Resorts Management System allows remote attackers to execute arbitrary SQL commands via the login page.


Provide references for further information: Can you share references or external links related to CVE-2008-0744?

{'name': '27450', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27450'}, {'name': '3644', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3644'}, {'name': 'prehotel-login-sql-injection(39935)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39935'}, {'name': '20080124 Pre Hotel and Resorts reservation portal login bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487053/100/100/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0744?


Explain the CVE ID: What does the identifier CVE-2008-0745 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0745.

Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0745?

{'name': '5089', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5089'}, {'name': '27712', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27712'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0745?


Explain the CVE ID: What does the identifier CVE-2008-0746 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0746.

SQL injection vulnerability in index.php in the Gallery (com_gallery) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action.


Provide references for further information: Can you share references or external links related to CVE-2008-0746?

{'name': '20080208 Mambo Component com_gallery Remote SQL Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://www.attrition.org/pipermail/vim/2008-February/001901.html'}, {'name': '20080208 Mambo Component com_gallery Remote SQL Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://www.attrition.org/pipermail/vim/2008-February/001902.html'}, {'name': '27695', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27695'}, {'name': '5084', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5084'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0746?


Explain the CVE ID: What does the identifier CVE-2008-0747 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0747.

Stack-based buffer overflow in COWON America jetAudio 7.0.5 and earlier allows user-assisted remote attackers to execute arbitrary code via a long URL in a .asx file, a different vulnerability than CVE-2007-5487.


Provide references for further information: Can you share references or external links related to CVE-2008-0747?

{'name': '5085', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5085'}, {'name': '3642', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3642'}, {'name': '20080208 jetAudio <= 7.0.5 (.ASX) Remote Stack Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487806/100/0/threaded'}, {'name': 'ADV-2008-0502', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0502'}, {'name': '28855', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28855'}, {'name': '27698', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27698'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0747?


Explain the CVE ID: What does the identifier CVE-2008-0748 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0748.

Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyISUpload.cab 1.0.0.38 for Sony ImageStation allows remote attackers to execute arbitrary code via a long argument to the SetLogging method.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0748?

{'name': '20080208 Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method (SetLogging)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487802/100/0/threaded'}, {'name': '3648', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3648'}, {'name': '5086', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5086'}, {'name': '28854', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28854'}, {'name': '5100', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5100'}, {'name': '27715', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27715'}, {'name': 'ADV-2008-0483', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0483'}, {'name': '20080208 Re: Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method (SetLogging)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487805/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0748?


Explain the CVE ID: What does the identifier CVE-2008-0749 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0749.

Cross-site scripting (XSS) vulnerability in index.php in Calimero.CMS 3.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a calimero_webpage action.


Provide references for further information: Can you share references or external links related to CVE-2008-0749?

{'name': '27690', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27690'}, {'name': '41573', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/41573'}, {'tags': ['x_refsource_MISC'], 'url': 'http://osvdb.org/ref/41/41573-calimero.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://downloads.securityfocus.com/vulnerabilities/exploits/27690.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0749?


Explain the CVE ID: What does the identifier CVE-2008-0750 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0750.

SQL injection vulnerability in philboard_forum.asp in Husrev BlackBoard 2.0.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0750?

{'name': '20080207 Blackboard (id) Remote SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487781/100/0/threaded'}, {'name': '27714', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27714'}, {'name': '20080207 Husrev Forums v2.0.1:PoWerBoard (tr) (id) Remote SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487780/100/200/threaded'}, {'name': 'blackboard-philboardforum-sql-injection(40368)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40368'}, {'name': '3641', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3641'}, {'name': '28842', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28842'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0750?


Explain the CVE ID: What does the identifier CVE-2008-0751 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0751.

Cross-site scripting (XSS) vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to plugin/tag/.


Provide references for further information: Can you share references or external links related to CVE-2008-0751?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.s9y.org/archives/190-Freetag-plugin-updated-to-prevent-XSS.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.bitsploit.de/uploads/Code/200802080000/'}, {'name': '28852', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28852'}, {'name': '20080208 Serendipity Freetag-plugin XSS vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060122.html'}, {'name': 'serendipity-freetag-xss(40376)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40376'}, {'name': '27697', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27697'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0751?


Explain the CVE ID: What does the identifier CVE-2008-0752 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0752.

SQL injection vulnerability in index.php in the Neogallery (com_neogallery) 1.1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show action.


Provide references for further information: Can you share references or external links related to CVE-2008-0752?

{'name': '27692', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27692'}, {'name': '5083', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5083'}, {'name': 'neogallery-index-sql-injection(40357)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40357'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0752?


Explain the CVE ID: What does the identifier CVE-2008-0753 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0753.

SQL injection vulnerability in calendar.php in Virtual War (VWar) 1.5 allows remote attackers to execute arbitrary SQL commands via the month parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0753?

{'name': '20080210 Vwar 1.5.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487900/100/0/threaded'}, {'name': '27722', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27722'}, {'name': '3643', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3643'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0753?


Explain the CVE ID: What does the identifier CVE-2008-0754 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0754.

Multiple SQL injection vulnerabilities in index.php in the Rapid Recipe (com_rapidrecipe) 1.6.5 component for Joomla! allow remote attackers to execute arbitrary SQL commands via (1) the user_id parameter in a showuser action or (2) the category_id parameter in a viewcategorysrecipes action.


Provide references for further information: Can you share references or external links related to CVE-2008-0754?

{'name': '28883', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28883'}, {'name': '20080210 Default Multiple Joomla! Component com_rapidrecipe "user_id=" Remote SQL Inj.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487901/100/0/threaded'}, {'name': '3649', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3649'}, {'name': '27724', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27724'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0754?


Explain the CVE ID: What does the identifier CVE-2008-0755 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0755.

Format string vulnerability in the ReportSysLogEvent function in the LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI, Professional, and Basic 4.10.1030 and earlier; Workstation 4.10.836 and earlier; and Standard 4.10.940 and earlier; might allow remote attackers to execute arbitrary code via format string specifiers in the queue name in a request.


Provide references for further information: Can you share references or external links related to CVE-2008-0755?

{'name': 'ADV-2008-0498', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0498'}, {'name': '20080211 Format string and DoS in Opium OPI and cyanPrintIP servers 4.10.x', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487955/100/0/threaded'}, {'name': '28870', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28870'}, {'name': '27728', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27728'}, {'name': '27734', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27734'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/cyanuro-adv.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0755?


Explain the CVE ID: What does the identifier CVE-2008-0756 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0756.

The LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI, Professional, and Basic 4.10.1030 and earlier; Workstation 4.10.836 and earlier; and Standard 4.10.940 and earlier; allows remote attackers to cause a denial of service (daemon crash) via a connection that begins with (1) a "Send queue state" LPD command 3 or (2) a "Send queue state" LPD command 4.


Provide references for further information: Can you share references or external links related to CVE-2008-0756?


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0756?


Explain the CVE ID: What does the identifier CVE-2008-0757 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0757.

Cross-site scripting (XSS) vulnerability in index.php in MercuryBoard 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter (aka the message text area), which leads to an injection in the messenger during private message (PM) preview. NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0757?

{'name': '1019371', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019371'}, {'name': '27730', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27730'}, {'name': '20080210 Mercury v1.1.5 Send Message Cross-Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487913/100/0/threaded'}, {'name': '28899', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28899'}, {'tags': ['x_refsource_MISC'], 'url': 'http://forum.aria-security.net/showthread.php?t=522'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0757?


Explain the CVE ID: What does the identifier CVE-2008-0758 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0758.

Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary (1) gif, (2) png, (3) jpg, (4) xml, (5) ico, (6) zip, and (7) html files via a "..\" (dot dot backslash) sequence in the filename.


Provide references for further information: Can you share references or external links related to CVE-2008-0758?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.grouplogic.com/files/ez/hot/hotFix51.cfm'}, {'name': '20080211 Multiple vulnerabilities in EztremeZ-IP File and Printer Server 5.1.2x15', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487952/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/ezipirla-adv.txt'}, {'name': '28862', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28862'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.org/poc/ezipirla.zip'}, {'name': 'ADV-2008-0485', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0485'}, {'name': '27718', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27718'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0758?


Explain the CVE ID: What does the identifier CVE-2008-0759 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0759.

ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allows remote attackers to cause a denial of service (daemon crash) via an invalid UAM field in a request to the Apple Filing Protocol (AFP) service on TCP port 548.


Provide references for further information: Can you share references or external links related to CVE-2008-0759?


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0759?


Explain the CVE ID: What does the identifier CVE-2008-0760 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0760.

Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.4.1.0 and earlier, and Sentinel Keys Server 1.0.4.0 and earlier, allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the URI.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-6483.