Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0390?


Explain the CVE ID: What does the identifier CVE-2009-0391 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0391.

Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.0.1 on z/OS allows attackers to read arbitrary files via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2009-0391?

{'name': '1021658', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1021658'}, {'name': 'PK79232', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PK79232'}, {'name': '33533', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33533'}, {'name': 'PK72036', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PK72036'}, {'name': '33729', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33729'}, {'name': 'ADV-2009-0423', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0423'}, {'name': '51663', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51663'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0391?


Explain the CVE ID: What does the identifier CVE-2009-0392 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0392.

Directory traversal vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the page parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0392?

{'name': '33519', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33519'}, {'name': '7915', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7915'}, {'name': '20090129 Motorola Wimax Modem CPEi300 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/500545/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0392?


Explain the CVE ID: What does the identifier CVE-2009-0393 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0393.

Cross-site scripting (XSS) vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows remote authenticated users to inject arbitrary web script or HTML via the page parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0393?


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0393?


Explain the CVE ID: What does the identifier CVE-2009-0394 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0394.

SQL injection vulnerability in login.php in Pre Lecture Exercises (PLEs) CMS 1.0 beta 4.2 allows remote attackers to execute arbitrary SQL commands via the school parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0394?

{'name': '33524', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33524'}, {'name': '7917', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7917'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0394?


Explain the CVE ID: What does the identifier CVE-2009-0395 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0395.

SQL injection vulnerability in the login feature in NetArt Media Car Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.


Provide references for further information: Can you share references or external links related to CVE-2009-0395?

{'name': '33521', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33521'}, {'name': '7916', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7916'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0395?


Explain the CVE ID: What does the identifier CVE-2009-0396 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0396.

The Sony Ericsson W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, and K530i phones allow remote attackers to cause a denial of service (device reboot or hang-up) via a malformed WAP Push packet to (1) SMS or (2) UDP port 2948.


Provide references for further information: Can you share references or external links related to CVE-2009-0396?

{'name': '33433', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33433'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.mseclab.com/index.php?page_id=123'}, {'name': '20090126 SonyEricsson WAP Push Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/500382/100/0/threaded'}, {'name': '33616', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33616'}, {'name': '1021634', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1021634'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0396?


Explain the CVE ID: What does the identifier CVE-2009-0397 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0397.

Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11, and GStreamer Plug-ins (aka gstreamer-plugins) 0.8.5, might allow remote attackers to execute arbitrary code via crafted Time-to-sample (aka stts) atom data in a malformed QuickTime media .mov file.


Provide references for further information: Can you share references or external links related to CVE-2009-0397?

{'name': '33405', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33405'}, {'name': '20090122 [TKADV2009-003] GStreamer Heap Overflow and Array Index out of Bounds Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/500317/100/0/threaded'}, {'name': '34336', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34336'}, {'name': '33815', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33815'}, {'name': '35777', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35777'}, {'tags': ['x_refsource_MISC'], 'url': 'http://trapkit.de/advisories/TKADV2009-003.txt'}, {'name': 'RHSA-2009:0271', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-0271.html'}, {'name': '33830', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33830'}, {'name': 'GLSA-200907-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200907-11.xml'}, {'name': '33650', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33650'}, {'name': 'ADV-2009-0225', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0225'}, {'name': 'SUSE-SR:2009:005', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html'}, {'name': 'oval:org.mitre.oval:def:9942', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9942'}, {'name': 'RHSA-2009:0270', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-0270.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=481267'}, {'name': 'gstreamer-qtdemuxparse-bo(48555)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48555'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2009-052.htm'}, {'name': 'USN-736-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-736-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.html'}, {'name': '[oss-security] 20090129 CVE Request -- (sort of urgent) gstreamer-plugins-good (repost) (more details about affected versions -- final version)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/01/29/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=bdc20b9baf13564d9a061343416395f8f9a92b53'}, {'name': 'MDVSA-2009:035', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:035'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0397?


Explain the CVE ID: What does the identifier CVE-2009-0398 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0398.

Array index error in the gst_qtp_trak_handler function in gst/qtdemux/qtdemux.c in GStreamer Plug-ins (aka gstreamer-plugins) 0.6.0 allows remote attackers to have an unknown impact via a crafted QuickTime media file.


Provide references for further information: Can you share references or external links related to CVE-2009-0398?

{'name': 'RHSA-2009:0269', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-0269.html'}, {'name': '33830', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33830'}, {'name': 'oval:org.mitre.oval:def:9886', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9886'}, {'name': '[oss-security] 20090129 CVE Request -- (sort of urgent) gstreamer-plugins-good (repost) (more details about affected versions -- final version)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/01/29/3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0398?


Explain the CVE ID: What does the identifier CVE-2009-0399 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0399.

Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.php.  NOTE: this is only a vulnerability when the administrator does not properly follow installation directions.


Provide references for further information: Can you share references or external links related to CVE-2009-0399?

{'name': '7894', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7894'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0399?


Explain the CVE ID: What does the identifier CVE-2009-0400 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0400.

SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL commands via the category_id parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0400?

{'name': '33495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33495'}, {'name': '33701', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33701'}, {'name': '7900', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7900'}, {'name': 'socialengine-blog-sql-injection(48316)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48316'}, {'name': '51644', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51644'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0400?


Explain the CVE ID: What does the identifier CVE-2009-0401 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0401.

SQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the cid parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0401?

{'name': '33470', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33470'}, {'name': '31923', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/31923'}, {'name': 'ephpcms-browsecats-sql-injection(48297)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48297'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/0901-exploits/ephpcmscid-sql.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0401?


Explain the CVE ID: What does the identifier CVE-2009-0402 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0402.

SQL injection vulnerability in client/new_account.php in Domain Technologie Control (DTC) before 0.29.16 allows remote attackers to execute arbitrary SQL commands via the (1) familyname, (2) christname, (3) company_name, (4) is_company, (5) email, (6) phone, (7) fax, (8) addr1, (9) addr2, (10) addr3, (11) zipcode, (12) city, (13) state, (14) country, and (15) vat_num parameters.


Provide references for further information: Can you share references or external links related to CVE-2009-0402?

{'name': '33496', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33496'}, {'name': 'domaintechnologie-newaccount-sql-injection(48292)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48292'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://freshmeat.net/projects/dtc/?branch_id=22759&release_id=292973'}, {'name': '51631', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51631'}, {'name': '33698', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33698'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commitdiff%3Bh=056e1d1849ff3aa183a410e2aab1c1c3e969247d'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0402?


Explain the CVE ID: What does the identifier CVE-2009-0403 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0403.

SQL injection vulnerability in admin/authenticate.php in Chipmunk Blogger Script allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.


Provide references for further information: Can you share references or external links related to CVE-2009-0403?

{'name': 'ADV-2009-0267', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0267'}, {'name': '7894', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7894'}, {'name': 'chipmunkblog-authenticate-sql-injection(48313)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48313'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0403?


Explain the CVE ID: What does the identifier CVE-2009-0404 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0404.

Multiple cross-site scripting (XSS) vulnerabilities in Bioinformatics htmLawed 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via invalid Cascading Style Sheets (CSS) expressions in the style attribute, which is processed by Internet Explorer 7.


Provide references for further information: Can you share references or external links related to CVE-2009-0404?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://freshmeat.net/projects/htmlawed/?branch_id=74760&release_id=293026'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bioinformatics.org/phplabware/forum/viewtopic.php?id=85'}, {'name': '51650', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51650'}, {'name': '33655', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33655'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://freshmeat.net/projects/htmlawed/?branch_id=74760&release_id=293090'}, {'name': 'htmlawed-unspecified-xss(48333)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48333'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bioinformatics.org/phplabware/internal_utilities/htmLawed/htmLawed_README.htm#s4.3'}, {'name': '33507', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33507'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0404?


Explain the CVE ID: What does the identifier CVE-2009-0405 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0405.

SQL injection vulnerability in articles.php in smartSite CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the var parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0405?

{'name': 'smartsitecms-articles-sql-injection(48321)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48321'}, {'name': '7901', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7901'}, {'name': '33497', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33497'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0405?


Explain the CVE ID: What does the identifier CVE-2009-0406 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0406.

SQL injection vulnerability in index.php in Community CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0406?

{'name': '7892', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7892'}, {'name': '33484', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33484'}, {'name': 'communitycms-index-sql-injection(48304)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48304'}, {'name': 'ADV-2009-0265', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0265'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0406?


Explain the CVE ID: What does the identifier CVE-2009-0407 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0407.

SQL injection vulnerability in admin/login.php in PHP-CMS Project 1 allows remote attackers to execute arbitrary SQL commands via the username parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0407?

{'name': '33473', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33473'}, {'name': '7876', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7876'}, {'name': 'phpcms-login-sql-injection(48267)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48267'}, {'name': 'ADV-2009-0244', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0244'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0407?


Explain the CVE ID: What does the identifier CVE-2009-0408 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0408.

Cross-site request forgery (CSRF) vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators.


Provide references for further information: Can you share references or external links related to CVE-2009-0408?

{'name': '51605', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51605'}, {'name': 'oscommerce-unspecified-csrf(48289)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48289'}, {'tags': ['x_refsource_MISC'], 'url': 'http://holisticinfosec.org/content/view/97/45/'}, {'name': '33446', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33446'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0408?


Explain the CVE ID: What does the identifier CVE-2009-0409 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0409.

SQL injection vulnerability in offline_auth.php in Max.Blog 1.0.6 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0409?

{'name': '7899', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7899'}, {'name': '33493', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33493'}, {'name': '33658', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33658'}, {'name': '20090127 Max.Blog <= 1.0.6 (offline_auth.php) Offline Authentication Bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/500470/100/0/threaded'}, {'name': '51645', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51645'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0409?


Explain the CVE ID: What does the identifier CVE-2009-0410 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0410.

Off-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA) in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command, leading to a buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2009-0410?

{'name': '33744', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33744'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.novell.com/Download?buildid=GjZRRdqCFW0'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.novell.com/support/viewContent.do?externalId=7002502'}, {'name': '33560', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33560'}, {'name': '20090202 ZDI-09-010: Novell Netware Groupwise GWIA RCPT Command Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/500609/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-09-010/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0410?


Explain the CVE ID: What does the identifier CVE-2009-0411 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0411.

Google Chrome before 1.0.154.46 does not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls and other web script.


Provide references for further information: Can you share references or external links related to CVE-2009-0411?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://codereview.chromium.org/18533'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://src.chromium.org/viewvc/chrome?view=rev&revision=8529'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://codereview.chromium.org/11264'}, {'name': 'googlechrome-xmlhttprequest-info-disclosure(48554)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48554'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0411?


Explain the CVE ID: What does the identifier CVE-2009-0412 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0412.

The ProcessLogin function in class.auth.php in Interspire Shopping Cart (ISC) 4.0.1 Ultimate edition allows remote attackers to bypass authentication and obtain administrative access by reusing the RememberToken cookie after a failed admin login attempt.


Provide references for further information: Can you share references or external links related to CVE-2009-0412?

{'name': '1021557', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1021557'}, {'name': '33212', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33212'}, {'name': '20090112 [BMSA-2009-01] Authentication bypass in Interspire Shopping Cart v4.0.1 and below', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/499967/100/0/threaded'}, {'name': 'interspire-classauth-security-bypass(47899)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/47899'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0412?


Explain the CVE ID: What does the identifier CVE-2009-0413 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0413.

Cross-site scripting (XSS) vulnerability in RoundCube Webmail (roundcubemail) 0.2 stable allows remote attackers to inject arbitrary web script or HTML via the background attribute embedded in an HTML e-mail message.


Provide references for further information: Can you share references or external links related to CVE-2009-0413?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.roundcube.net/changeset/2245'}, {'name': 'ADV-2009-0192', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0192'}, {'name': '33372', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33372'}, {'name': 'roundcube-html-xss(48129)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48129'}, {'name': '33622', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33622'}, {'name': '33827', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33827'}, {'name': 'FEDORA-2009-1256', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00082.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0413?


Explain the CVE ID: What does the identifier CVE-2009-0414 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0414.

Unspecified vulnerability in Tor before 0.2.0.33 has unspecified impact and remote attack vectors that trigger heap corruption.


Provide references for further information: Can you share references or external links related to CVE-2009-0414?

{'name': 'ADV-2009-0210', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0210'}, {'name': '34583', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34583'}, {'name': '[or-announce] 20090122 Tor 0.2.0.33 is released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.seul.org/or/announce/Jan-2009/msg00000.html'}, {'name': '33677', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33677'}, {'name': 'FEDORA-2009-0897', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00902.html'}, {'name': '33399', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33399'}, {'name': '33635', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33635'}, {'name': 'GLSA-200904-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200904-11.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.torproject.org/blog/tor-0.2.0.33-stable-released'}, {'name': '1021633', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1021633'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0414?


Explain the CVE ID: What does the identifier CVE-2009-0415 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0415.

Untrusted search path vulnerability in trickle 1.07 allows local users to execute arbitrary code via a Trojan horse trickle-overload.so in the current working directory, which is referenced in the LD_PRELOAD path.


Provide references for further information: Can you share references or external links related to CVE-2009-0415?

{'name': '[oss-security] 20090129 CVE Request (trickle)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/01/29/5'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=513456'}, {'name': '33516', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33516'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0415?


Explain the CVE ID: What does the identifier CVE-2009-0416 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0416.

The SSL certificate setup program (genSslCert.sh) in Standards Based Linux Instrumentation for Manageability (SBLIM) sblim-sfcb 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /var/tmp/key.pem, (2) /var/tmp/cert.pem, and (3) /var/tmp/ssl.cnf temporary files.


Provide references for further information: Can you share references or external links related to CVE-2009-0416?

{'name': '33583', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33583'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sourceforge.net/tracker/index.php?func=detail&aid=2561165&group_id=128809&atid=712784'}, {'name': '51783', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51783'}, {'name': '[oss-security] 20090203 CVE Request: sblim-sfcb genSslCert.sh temp race', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://sourceforge.net/forum/forum.php?forum_id=874261'}, {'name': 'SUSE-SR:2009:004', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html'}, {'name': '33795', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33795'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0416?


Explain the CVE ID: What does the identifier CVE-2009-0417 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0417.

Cross-site scripting (XSS) vulnerability in the AgaviWebRouting::gen(null) method in Agavi 0.11 before 0.11.6 and 1.0 before 1.0.0 beta 8 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with certain characters that are not properly handled by web browsers that do not strictly follow RFC 3986, such as Internet Explorer 6 and 7.


Provide references for further information: Can you share references or external links related to CVE-2009-0417?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.agavi.org/post/75829956/agavi-0-11-6-released-fixes-vulnerability'}, {'name': '33826', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33826'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.agavi.org/ticket/1019'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.agavi.org/post/75830918/agavi-1-0-0-beta-8-released-fixes-vulnerability'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0417?


Explain the CVE ID: What does the identifier CVE-2009-0418 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0418.

The IPv6 Neighbor Discovery Protocol (NDP) implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity), read private network traffic, and possibly execute arbitrary code via a spoofed message that modifies the Forward Information Base (FIB), a related issue to CVE-2008-2476.


Provide references for further information: Can you share references or external links related to CVE-2009-0418?

{'name': 'HPSBUX02407', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=123368621330334&w=2'}, {'name': '33787', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33787'}, {'name': '1021660', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1021660'}, {'name': 'ADV-2009-0312', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0312'}, {'name': 'oval:org.mitre.oval:def:5943', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5943'}, {'name': 'SSRT080107', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=123368621330334&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0418?


Explain the CVE ID: What does the identifier CVE-2009-0419 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0419.

Microsoft XML Core Services, as used in Microsoft Expression Web, Office, Internet Explorer 6 and 7, and other products, does not properly restrict access from web pages to Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-4033.


Provide references for further information: Can you share references or external links related to CVE-2009-0419?

{'name': 'msxml-httponly-cookie-information-disclosure(48815)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48815'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=380418'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0419?


Explain the CVE ID: What does the identifier CVE-2009-0420 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0420.

SQL injection vulnerability in the RD-Autos (com_rdautos) 1.5.5 Stable component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.


Provide references for further information: Can you share references or external links related to CVE-2009-0420?

{'name': '7795', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7795'}, {'name': '33562', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33562'}, {'name': '33297', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33297'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0420?


Explain the CVE ID: What does the identifier CVE-2009-0421 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0421.

SQL injection vulnerability in the Eventing (com_eventing) 1.6.x component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.


Provide references for further information: Can you share references or external links related to CVE-2009-0421?

{'name': '33296', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33296'}, {'name': '7793', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7793'}, {'name': '33563', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33563'}, {'name': 'eventing-index-sql-injection(48016)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48016'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0421?


Explain the CVE ID: What does the identifier CVE-2009-0422 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0422.

Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when register_globals is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the _SERVER[ConfigFile] parameter to admin/index.php.


Provide references for further information: Can you share references or external links related to CVE-2009-0422?

{'name': 'phplist-indexphp-file-include(47945)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/47945'}, {'name': '33533', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33533'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.bugreport.ir/index_60.htm'}, {'name': '20090114 phpList <= 2.10.8 Local File inclusion', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/500057/100/0/threaded'}, {'name': '7778', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7778'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0422?


Explain the CVE ID: What does the identifier CVE-2009-0423 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0423.

Directory traversal vulnerability in index.php in Php Photo Album (PHPPA) 0.8 BETA allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the preview parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0423?

{'name': '33277', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33277'}, {'name': '7786', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7786'}, {'name': 'phpphotoalbum-index-file-include(48017)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48017'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0423?


Explain the CVE ID: What does the identifier CVE-2009-0424 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0424.

Cross-site scripting (XSS) vulnerability in sign1.php in AN Guestbook (ANG) before 0.7.7 allows remote attackers to inject arbitrary web script or HTML via the country parameter, which is not properly handled in (1) administrator/manage.php or (2) administrator/trash.php.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2009-0424?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/forum/forum.php?forum_id=907703'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=653720'}, {'name': '33292', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33292'}, {'name': 'anguestbook-sign1-xss(48018)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48018'}, {'name': '33490', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33490'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0424?


Explain the CVE ID: What does the identifier CVE-2009-0425 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0425.

SQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the clanek parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0425?

{'name': '7797', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7797'}, {'name': '33303', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33303'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0425?


Explain the CVE ID: What does the identifier CVE-2009-0426 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0426.

SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Classified Listings Manager 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0426?

{'name': '33253', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33253'}, {'name': '7767', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7767'}, {'name': 'classifieds-uploadimage-sql-injection(47959)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/47959'}, {'name': '33482', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33482'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0426?


Explain the CVE ID: What does the identifier CVE-2009-0427 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0427.

SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Member Directory Manager 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0427?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://dmxready.helpserve.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=93'}, {'name': 'memberdirectory-uploadimage-sql-injection(47960)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/47960'}, {'name': '33253', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33253'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12'}, {'name': '33482', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33482'}, {'name': '7773', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7773'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0427?


Explain the CVE ID: What does the identifier CVE-2009-0428 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0428.

SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Secure Document Library 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0428?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://dmxready.helpserve.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=93'}, {'name': '33253', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33253'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12'}, {'name': 'securedocumentlibrary-uploadimage-sql-inj(48013)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48013'}, {'name': '33482', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33482'}, {'name': '7787', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7787'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0428?


Explain the CVE ID: What does the identifier CVE-2009-0429 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0429.

Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to search.asp, (2) SortDir parameter to auctionsended.asp, and the (3) catid parameter to wishlist.php.


Provide references for further information: Can you share references or external links related to CVE-2009-0429?

{'name': '20090116 Active Bids', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/500144/100/0/threaded'}, {'name': '33306', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33306'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0429?


Explain the CVE ID: What does the identifier CVE-2009-0430 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0430.

Multiple cross-site scripting (XSS) vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to search.asp and the (2) URL parameter to tellafriend.asp.


Provide references for further information: Can you share references or external links related to CVE-2009-0430?


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0430?


Explain the CVE ID: What does the identifier CVE-2009-0431 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0431.

SQL injection vulnerability in Default.asp in LinksPro Standard Edition allows remote attackers to execute arbitrary SQL commands via the OrderDirection parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0431?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/0901-exploits/linkspro-sql.txt'}, {'name': '33305', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33305'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0431?


Explain the CVE ID: What does the identifier CVE-2009-0432 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0432.

The installation process for the File Transfer servlet in the System Management/Repository component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.19 does not enable the secure version, which allows remote attackers to obtain sensitive information via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2009-0432?

{'name': 'websphere-file-transfer-info-disclosure(48522)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48522'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27007951'}, {'name': '33700', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33700'}, {'name': 'PK59108', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1PK59108'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0432?


Explain the CVE ID: What does the identifier CVE-2009-0433 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0433.

Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1.x before 5.1.1.19, 6.0.x before 6.0.2.29, and 6.1.x before 6.1.0.19, when Web Server plug-in content buffering is enabled, allows attackers to cause a denial of service (daemon crash) via unknown vectors, related to a mishandling of client read failures in which clients receive many 500 HTTP error responses and backend servers are incorrectly labeled as down.


Provide references for further information: Can you share references or external links related to CVE-2009-0433?

{'name': 'PK67161', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PK67161'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27007951'}, {'name': '33700', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33700'}, {'name': 'websphere-server-plugin-dos(48523)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48523'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27006879'}, {'name': 'PK63499', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1PK63499'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27007033'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0433?


Explain the CVE ID: What does the identifier CVE-2009-0434 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0434.

PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.31, 6.1.x before 6.1.0.21, and 7.0.x before 7.0.0.1, when Performance Monitoring Infrastructure (PMI) is enabled, allows local users to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files.  NOTE: this is probably a duplicate of CVE-2008-5413.


Provide references for further information: Can you share references or external links related to CVE-2009-0434?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27007951'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27006876'}, {'name': '33700', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33700'}, {'name': 'PK79230', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1PK79230'}, {'name': 'websphere-pmi-information-disclosure(48524)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48524'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27014463'}, {'name': 'PK63886', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1PK63886'}, {'name': 'ADV-2009-0423', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0423'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0434?


Explain the CVE ID: What does the identifier CVE-2009-0435 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0435.

Unspecified vulnerability in the IBM Asynchronous I/O (aka AIO or libibmaio) library in the Java Message Service (JMS) component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.17 on AIX 5.3 allows attackers to cause a denial of service (daemon crash) via vectors related to the aio_getioev2 and getEvent methods.


Provide references for further information: Can you share references or external links related to CVE-2009-0435?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27007951'}, {'name': '33700', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33700'}, {'name': 'PK64529', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?rs=0&uid=swg24019205'}, {'name': 'websphere-libibmaio-dos(48525)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48525'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0435?


Explain the CVE ID: What does the identifier CVE-2009-0436 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0436.

The (1) mod_ibm_ssl and (2) mod_cgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Application Server (WAS), set incorrect permissions for AF_UNIX sockets, which has unknown impact and local attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2009-0436?

{'name': 'websphere-http-afunix-incorrect-permissions(48526)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48526'}, {'name': 'PK66154', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1PK66154'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27006876'}, {'name': '33700', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33700'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27007951'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27008517'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27007033'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0436?


Explain the CVE ID: What does the identifier CVE-2009-0437 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0437.

The Installation Factory installation process for IBM WebSphere Application Server (WAS) 6.0.2 on Windows, when WAS is registered as a Windows service, allows local users to obtain sensitive information by reading the logs/instconfigifwas6.log log file.


Provide references for further information: Can you share references or external links related to CVE-2009-0437?

{'name': 'PK67405', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1PK67405'}, {'name': '33849', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33849'}, {'name': 'websphere-install-log-info-disclosure(48527)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48527'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0437?


Explain the CVE ID: What does the identifier CVE-2009-0438 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0438.

IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows allows remote attackers to bypass "Authorization checking" and obtain sensitive information from JSP pages via a crafted request.  NOTE: this is probably a duplicate of CVE-2008-5412.


Provide references for further information: Can you share references or external links related to CVE-2009-0438?

{'name': '33700', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33700'}, {'name': 'PK75248', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1PK75248'}, {'name': 'websphere-jsp-win-information-disclosure(48528)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48528'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27014463'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0438?


Explain the CVE ID: What does the identifier CVE-2009-0439 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0439.

Unspecified vulnerability in the queue manager in IBM WebSphere MQ (WMQ) 5.3, 6.0 before 6.0.2.6, and 7.0 before 7.0.0.2 allows local users to gain privileges via vectors related to the (1) setmqaut, (2) dmpmqaut, and (3) dspmqaut authorization commands.


Provide references for further information: Can you share references or external links related to CVE-2009-0439?

{'tags': ['x_refsource_MISC'], 'url': 'http://www-01.ibm.com/support/docview.wss?rs=171&uid=swg27006037'}, {'name': '33857', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33857'}, {'name': '52297', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52297'}, {'name': '34034', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34034'}, {'name': 'websphere-mq-privilege-escalation(48529)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48529'}, {'name': 'IZ40824', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1IZ40824'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0439?


Explain the CVE ID: What does the identifier CVE-2009-0440 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0440.

IBM WebSphere Partner Gateway (WPG) 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet (aka RNIF) document to a backend application, related to (1) "altered service content" and (2) "digital signature foot-print."


Provide references for further information: Can you share references or external links related to CVE-2009-0440?

{'name': 'websphere-pgateway-rnif-signatures(48530)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48530'}, {'name': '33839', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33839'}, {'name': '33994', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33994'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21330341'}, {'name': 'JR31231', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1JR31231'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0440?


Explain the CVE ID: What does the identifier CVE-2009-0441 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0441.

PHP remote file inclusion vulnerability in skin_shop/standard/2_view_body/body_default.php in TECHNOTE 7.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the shop_this_skin_path parameter, a different vector than CVE-2008-4138.


Provide references for further information: Can you share references or external links related to CVE-2009-0441?

{'name': '33592', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33592'}, {'name': '33732', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33732'}, {'name': '7965', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7965'}, {'name': '51740', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51740'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0441?


Explain the CVE ID: What does the identifier CVE-2009-0442 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0442.

Directory traversal vulnerability in bbcode.php in PHPbbBook 1.3 and 1.3h allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the l parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0442?

{'name': 'ADV-2009-0317', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0317'}, {'name': '33811', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33811'}, {'name': '33603', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33603'}, {'name': '51737', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51737'}, {'name': '7980', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7980'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0442?


Explain the CVE ID: What does the identifier CVE-2009-0443 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0443.

Stack-based buffer overflow in Elecard AVC HD PLAYER 5.5.90116 allows remote attackers to execute arbitrary code via an M3U file containing a long string in a URL.


Provide references for further information: Can you share references or external links related to CVE-2009-0443?

{'name': '51717', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51717'}, {'name': '33742', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33742'}, {'name': '7942', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7942'}, {'name': '33089', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33089'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0443?


Explain the CVE ID: What does the identifier CVE-2009-0444 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0444.

Multiple PHP remote file inclusion vulnerabilities in GRBoard 1.8, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) theme parameter to (a) 179_squarebox_pds_list/view.php, (b) 179_squarebox_minishop_expand/view.php, (c) 179_squarebox_gallery_list_pds/view.php, (d) 179_squarebox_gallery_list/view.php, (e) 179_squarebox_gallery/view.php, (f) 179_squarebox_board_swfupload/view.php, (g) 179_squarebox_board_expand/view.php, (h) 179_squarebox_board_basic_with_grcode/view.php, (i) 179_squarebox_board_basic/view.php, (j) 179_simplebar_pds_list/view.php, (k) 179_simplebar_notice/view.php, (l) 179_simplebar_gallery_list_pds/view.php, (m) 179_simplebar_gallery/view.php, and (n) 179_simplebar_basic/view.php in theme/; the (2) path parameter to (o) latest/sirini_gallery_latest/list.php; and the (3) grboard parameter to (p) include.php and (q) form_mail.php.


Provide references for further information: Can you share references or external links related to CVE-2009-0444?

{'name': '33602', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33602'}, {'name': '33812', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33812'}, {'name': '7979', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7979'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0444?


Explain the CVE ID: What does the identifier CVE-2009-0445 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0445.

SQL injection vulnerability in index.php in Dreampics Gallery Builder allows remote attackers to execute arbitrary SQL commands via the exhibition_id parameter in a gallery.viewPhotos action.


Provide references for further information: Can you share references or external links related to CVE-2009-0445?

{'name': '7968', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7968'}, {'name': '9451', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/9451'}, {'name': '33596', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33596'}, {'name': '33730', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33730'}, {'name': 'dreampics-exhibitionid-sql-injection(48468)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48468'}, {'name': '51741', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51741'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0445?


Explain the CVE ID: What does the identifier CVE-2009-0446 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0446.

SQL injection vulnerability in photo.php in WEBalbum 2.4b allows remote attackers to execute arbitrary SQL commands via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0446?

{'name': '33590', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33590'}, {'name': '7961', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7961'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0446?


Explain the CVE ID: What does the identifier CVE-2009-0447 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0447.

Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the user parameter (aka UserName field) or (2) the pass parameter (aka Pass field) to (a) admin/admin.asp or (b) the default URI under admin/.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2009-0447?

{'name': '33593', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33593'}, {'name': '33771', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33771'}, {'name': '51754', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51754'}, {'name': '7963', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7963'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0447?


Explain the CVE ID: What does the identifier CVE-2009-0448 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0448.

Directory traversal vulnerability in admin/modules/aa/preview.php in Syntax Desktop 2.7 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the synTarget parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0448?

{'name': '7977', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7977'}, {'name': '33601', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33601'}, {'name': 'syntax-desktop-preview-file-include(48496)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48496'}, {'name': 'ADV-2009-0319', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0319'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0448?


Explain the CVE ID: What does the identifier CVE-2009-0449 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0449.

Buffer overflow in klim5.sys in Kaspersky Anti-Virus for Workstations 6.0 and Anti-Virus 2008 allows local users to gain privileges via an IOCTL 0x80052110 call.


Provide references for further information: Can you share references or external links related to CVE-2009-0449?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.reversemode.com/index.php?option=com_content&task=view&id=60&Itemid=1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://kartoffel.reversemode.com/downloads/kaspersky_klim5_plugin.zip'}, {'name': '1021661', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1021661'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.wintercore.com/advisories/advisory_W020209.html'}, {'name': '20090202 [Wintercore Research WS02-0209] Kaspersky Products Klim5.sys local privilege escalation', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/500606/100/0/threaded'}, {'name': '33561', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33561'}, {'name': '33788', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33788'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0449?


Explain the CVE ID: What does the identifier CVE-2009-0450 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0450.

Stack-based buffer overflow in BlazeVideo HDTV Player 3.5 and earlier allows remote attackers to execute arbitrary code via a long string in a playlist (aka .plf) file.


Provide references for further information: Can you share references or external links related to CVE-2009-0450?

{'name': 'blazevideo-hdtv-plf-bo(48498)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48498'}, {'name': '7975', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7975'}, {'name': '33588', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33588'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0450?


Explain the CVE ID: What does the identifier CVE-2009-0451 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0451.

SQL injection vulnerability in Skalfa SkaLinks 1.5 allows remote attackers to execute arbitrary SQL commands via the Admin name field to the default URI under admin/.


Provide references for further information: Can you share references or external links related to CVE-2009-0451?

{'name': '33546', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33546'}, {'name': '7932', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7932'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0451?


Explain the CVE ID: What does the identifier CVE-2009-0452 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0452.

Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pass parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0452?

{'name': '7956', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7956'}, {'name': '33576', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33576'}, {'name': '51712', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51712'}, {'name': '33767', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33767'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0452?


Explain the CVE ID: What does the identifier CVE-2009-0453 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0453.

Online Grades 3.2.4 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.


Provide references for further information: Can you share references or external links related to CVE-2009-0453?

{'name': '7956', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7956'}, {'name': '51713', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51713'}, {'name': '33767', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33767'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0453?


Explain the CVE ID: What does the identifier CVE-2009-0454 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0454.

Multiple SQL injection vulnerabilities in DMXReady Online Notebook Manager 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field.  NOTE: some third parties report inability to verify this issue.


Provide references for further information: Can you share references or external links related to CVE-2009-0454?

{'name': 'onm-login-sql-injection(48503)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48503'}, {'name': '7970', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7970'}, {'name': '33600', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33600'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0454?


Explain the CVE ID: What does the identifier CVE-2009-0455 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0455.

Cross-site scripting (XSS) vulnerability in the anonymous comments feature in lib-comment.php in glFusion 1.1.0, 1.1.1, and earlier versions allows remote attackers to inject arbitrary web script or HTML via the username parameter to comment.php.


Provide references for further information: Can you share references or external links related to CVE-2009-0455?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.fortconsult.net/images/pdf/advisories/glFusion-xss-advisory.pdf'}, {'name': '33878', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33878'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.glfusion.org/article.php/xsscomments'}, {'name': '33683', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33683'}, {'name': 'glfusion-libcomment-xss(48603)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/48603'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0455?


Explain the CVE ID: What does the identifier CVE-2009-0456 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0456.

PHP remote file inclusion vulnerability in examples/example_clientside_javascript.php in patForms, as used in Sourdough 0.3.5, allows remote attackers to execute arbitrary PHP code via a URL in the neededFiles[patForms] parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0456?

{'name': '7946', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7946'}, {'name': '33569', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33569'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0456?


Explain the CVE ID: What does the identifier CVE-2009-0457 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0457.

Multiple directory traversal vulnerabilities in AJA Portal 1.2 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter to admin/case.php in the (1) Contact_Plus and (2) Reviews modules, and (3) the module_name parameter to admin/includes/FANCYNLOptions.php in the Fancy_NewsLetter module.


Provide references for further information: Can you share references or external links related to CVE-2009-0457?

{'name': '51708', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51708'}, {'name': '51709', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51709'}, {'name': '7939', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7939'}, {'name': '33565', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33565'}, {'name': '33735', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33735'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0457?


Explain the CVE ID: What does the identifier CVE-2009-0458 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0458.

Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Ware Support 1.x allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter (aka Username field) or (2) the pwd parameter (aka Password field).  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2009-0458?

{'name': '7940', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7940'}, {'name': '33777', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33777'}, {'name': '33564', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33564'}, {'name': '51733', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51733'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0458?


Explain the CVE ID: What does the identifier CVE-2009-0459 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0459.

Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Password Protect: Enhanced 1.x allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter (aka Username field) or (2) the pwd parameter (aka Password field).  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2009-0459?

{'name': '7941', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7941'}, {'name': '33777', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33777'}, {'name': '33564', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33564'}, {'name': '51733', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51733'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0459?


Explain the CVE ID: What does the identifier CVE-2009-0460 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0460.

Whole Hog Ware Support 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adminid cookie.


Provide references for further information: Can you share references or external links related to CVE-2009-0460?

{'name': '33577', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33577'}, {'name': '33777', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33777'}, {'name': '7951', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7951'}, {'name': '51734', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51734'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0460?


Explain the CVE ID: What does the identifier CVE-2009-0461 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0461.

Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adminid cookie.


Provide references for further information: Can you share references or external links related to CVE-2009-0461?

{'name': '33577', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33577'}, {'name': '33777', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33777'}, {'name': '51734', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51734'}, {'name': '7952', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7952'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0461?


Explain the CVE ID: What does the identifier CVE-2009-0462 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0462.

Multiple SQL injection vulnerabilities in customer_login_check.asp in ClickTech ClickCart 6.0 allow remote attackers to execute arbitrary SQL commands via (1) the txtEmail parameter (aka E-MAIL field) or (2) the txtPassword parameter (aka password field) to customer_login.asp. NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2009-0462?

{'name': '33575', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33575'}, {'name': '33774', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33774'}, {'name': '51718', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51718'}, {'name': '7953', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7953'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0462?


Explain the CVE ID: What does the identifier CVE-2009-0463 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0463.

PHP remote file inclusion vulnerability in includes/header.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0463?

{'name': '7954', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7954'}, {'name': '33578', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33578'}, {'name': '33649', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33649'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0463?


Explain the CVE ID: What does the identifier CVE-2009-0464 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0464.

PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-0464?

{'name': '7955', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7955'}, {'name': '33768', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33768'}, {'name': '33578', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33578'}, {'name': '51716', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51716'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0464?


Explain the CVE ID: What does the identifier CVE-2009-0465 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0465.

The SaveDoc method in the All_In_The_Box.AllBox ActiveX control in ALL_IN_THE_BOX.OCX in Synactis ALL In-The-Box ActiveX 3 allows remote attackers to create and overwrite arbitrary files via an argument ending in a '\0' character, which bypasses the intended .box filename extension, as demonstrated by a C:\boot.ini\0 argument.


Provide references for further information: Can you share references or external links related to CVE-2009-0465?

{'name': '33535', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33535'}, {'name': '51693', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51693'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.dsecrg.com/pages/vul/show.php?id=62'}, {'name': 'ADV-2009-0298', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0298'}, {'name': '33728', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33728'}, {'name': '7928', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7928'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0465?


Explain the CVE ID: What does the identifier CVE-2009-0466 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0466.

Cross-site scripting (XSS) vulnerability in Vivvo CMS before 4.1.1 allows remote attackers to inject arbitrary web script or HTML via a URI that triggers a 404 Page Not Found response.


Provide references for further information: Can you share references or external links related to CVE-2009-0466?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vivvo.net/changelog.php'}, {'name': '33368', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33368'}, {'name': '33582', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33582'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0466?


Explain the CVE ID: What does the identifier CVE-2009-0467 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0467.

Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a deny_log manage action.


Provide references for further information: Can you share references or external links related to CVE-2009-0467?

{'name': '33523', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33523'}, {'name': '7919', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7919'}, {'name': '51659', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51659'}, {'name': '33739', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33739'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0467?


Explain the CVE ID: What does the identifier CVE-2009-0468 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0468.

Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown the server, (2) send ping packets, (3) enable network services, (4) configure a proxy server, and (5) modify other settings via parameters in the query string.


Provide references for further information: Can you share references or external links related to CVE-2009-0468?

{'name': '33523', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33523'}, {'name': '51660', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/51660'}, {'name': '7919', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/7919'}, {'name': '33739', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33739'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0468?


Explain the CVE ID: What does the identifier CVE-2009-0469 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0469.

Unspecified vulnerability in futomi's CGI Cafe Fulltext search CGI 1.1.2 allows remote attackers to gain administrative privileges via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2009-0469?

{'name': 'JVN#80771386', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN80771386/index.html'}, {'name': 'JVNDB-2009-000008', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000008.html'}, {'name': '33409', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33409'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.futomi.com/library/info/2009/20090123.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0469?


Explain the CVE ID: What does the identifier CVE-2009-0470 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0470.

Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 12.4(23) allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under (1) level/15/exec/-/ or (2) exec/, a different vulnerability than CVE-2008-3821.


Provide references for further information: Can you share references or external links related to CVE-2009-0470?

{'name': '20090204 Cisco IOS XSS/CSRF Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/500674/100/0/threaded'}, {'name': '33625', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33625'}, {'name': '33844', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33844'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0470?


Explain the CVE ID: What does the identifier CVE-2009-0471 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0471.

Cross-site request forgery (CSRF) vulnerability in the HTTP server in Cisco IOS 12.4(23) allows remote attackers to execute arbitrary commands, as demonstrated by executing the hostname command with a level/15/configure/-/hostname request.


Provide references for further information: Can you share references or external links related to CVE-2009-0471?

{'name': '20090204 Cisco IOS XSS/CSRF Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/500674/100/0/threaded'}, {'name': '33844', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33844'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0471?


Explain the CVE ID: What does the identifier CVE-2009-0472 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0472.

Multiple cross-site scripting (XSS) vulnerabilities in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2009-0472?

{'name': 'VU#882619', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/882619'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729'}, {'name': '33783', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33783'}, {'name': '33638', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33638'}, {'name': 'ADV-2009-0347', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0347'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-0472?


Explain the CVE ID: What does the identifier CVE-2009-0473 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-0473.

Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.