Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2005-1269
Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yahoo! message with non-ASCII characters in a file name.
Affected Products: n/a
References: [{'name': 'FLSA:158543', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/426078/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gaim.sourceforge.net/security/?id=18'}, {'name': 'oval:org.mitre.oval:def:744', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A744'}, {'name': 'oval:org.mitre.oval:def:9544', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9544'}, {'name': 'MDKSA-2005:099', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:099'}, {'name': 'RHSA-2005:518', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-518.html'}, {'name': 'DSA-734', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-734'}, {'name': '13931', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13931'}, {'name': 'USN-139-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/139-1/'}, {'name': 'GLSA-200506-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200506-11.xml'}, {'name': 'SUSE-SA:2005:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_36_sudo.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1270
The (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'name': '13399', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13399'}, {'name': 'rootkit-hunter-checkupdate-symlink(20279)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20279'}, {'name': '15127', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15127'}, {'name': '15861', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15861'}, {'name': 'GLSA-200504-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200504-25.xml'}]
CVE State: PUBLISHED
Explain CVE-2005-1272
Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050.
Affected Products: n/a
References: [{'name': 'VU#279774', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/279774'}, {'name': '14453', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/14453'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33239'}, {'name': '20050803 CA BrightStor ARCserve Backup Agent for MS SQL Server Buffer Overflow', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=287&type=vulnerabilities&flashstatus=true'}, {'name': 'brightstor-enterprise-backup-bo(21656)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/21656'}]
CVE State: PUBLISHED
Explain CVE-2005-1274
Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via an HTTP unlock request and a long "If" parameter.
Affected Products: n/a
References: [{'name': "20050426 MySQL MaxDB Webtool Remote 'If' Stack Overflow Vulnerability", 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=236&type=vulnerabilities'}]
CVE State: PUBLISHED
Explain CVE-2005-1275
Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a PNM file with a small colors value.
Affected Products: n/a
References: [{'name': 'MDKSA-2005:107', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:107'}, {'name': 'oval:org.mitre.oval:def:10003', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10003'}, {'name': '13351', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13351'}, {'name': '20050424 [Overflow.pl] ImageMagick ReadPNMImage() Heap Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/lists/bugtraq/2005/Apr/0407.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.overflow.pl/adv/imheapoverflow.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.imagemagick.org/script/changelog.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=90423'}, {'name': 'oval:org.mitre.oval:def:711', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A711'}, {'name': 'RHSA-2005:413', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-413.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1278
The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero length, as demonstrated using a GRE packet.
Affected Products: n/a
References: [{'name': '13392', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13392'}, {'name': '15125', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15125'}, {'name': 'RHSA-2005:421', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-421.html'}, {'name': '20050426 tcpdump[v3.8.x/v3.9.1]: ISIS, BGP, and LDP infinite loop DOS exploits.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/396932'}, {'name': 'RHSA-2005:417', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-417.html'}, {'name': 'FLSA:156139', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/430292/100/0/threaded'}, {'name': 'SCOSA-2005.60', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.60/SCOSA-2005.60.txt'}, {'name': 'oval:org.mitre.oval:def:10159', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10159'}, {'name': '18146', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18146'}]
CVE State: PUBLISHED
Explain CVE-2005-1279
tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function.
Affected Products: n/a
References: [{'name': '15125', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15125'}, {'name': '17101', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17101'}, {'name': 'RHSA-2005:421', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-421.html'}, {'name': 'oval:org.mitre.oval:def:9601', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9601'}, {'name': '20050426 tcpdump[v3.8.x/v3.9.1]: ISIS, BGP, and LDP infinite loop DOS exploits.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/396932'}, {'name': 'DSA-850', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-850'}, {'name': 'RHSA-2005:417', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-417.html'}, {'name': 'FLSA:156139', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/430292/100/0/threaded'}, {'name': 'SCOSA-2005.60', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.60/SCOSA-2005.60.txt'}, {'name': '18146', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18146'}, {'name': '13389', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13389'}]
CVE State: PUBLISHED
Explain CVE-2005-1280
The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4.
Affected Products: n/a
References: [{'name': '20050426 tcpdump(/ethereal)[]: (RSVP) rsvp_print() infinite loop DOS.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/396930'}, {'name': '15125', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15125'}, {'name': 'RHSA-2005:421', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-421.html'}, {'name': 'oval:org.mitre.oval:def:10732', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10732'}, {'name': 'RHSA-2005:417', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-417.html'}, {'name': 'FLSA:156139', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/430292/100/0/threaded'}, {'name': 'SCOSA-2005.60', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.60/SCOSA-2005.60.txt'}, {'name': '18146', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18146'}, {'name': '13390', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13390'}]
CVE State: PUBLISHED
Explain CVE-2005-1281
Ethereal 0.10.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4.
Affected Products: n/a
References: [{'name': '20050426 tcpdump(/ethereal)[]: (RSVP) rsvp_print() infinite loop DOS.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/396930'}, {'name': '13391', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13391'}]
CVE State: PUBLISHED
Explain CVE-2005-1282
Multiple cross-site scripting (XSS) vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the src parameter in an IMG tag, (2) User settings, or (3) Address book input boxes in the webmail interface.
Affected Products: n/a
References: [{'name': '20050422 Multiple vulnerabilities in Argosoft Mail Server 1.8.7.6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111419001527077&w=2'}, {'name': 'argosoft-mail-server-html-tag-filter-xss(20225)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20225'}, {'name': '15100', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15100'}, {'name': '13326', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13326'}]
CVE State: PUBLISHED
Explain CVE-2005-1283
Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1) read arbitrary files via the UIDL parameter to the msg script or (2) copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than CVE-2005-0367.
Affected Products: n/a
References: [{'name': 'argosoft-mail-server-dir-traversal(20229)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20229'}, {'name': '20050422 Multiple vulnerabilities in Argosoft Mail Server 1.8.7.6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111419001527077&w=2'}, {'name': 'argosoft-mail-server-eml-files-dir-traversal(20226)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20226'}, {'name': '15823', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15823'}, {'name': '15821', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15821'}]
CVE State: PUBLISHED
Explain CVE-2005-1284
The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP POST request.
Affected Products: n/a
References: [{'name': '13323', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13323'}, {'name': '20050422 Multiple vulnerabilities in Argosoft Mail Server 1.8.7.6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111419001527077&w=2'}, {'name': 'argosoft-mail-server-add-new-mail-account(20228)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20228'}, {'name': '15822', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15822'}]
CVE State: PUBLISHED
Explain CVE-2005-1285
Cross-site scripting (XSS) vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the hilight parameter.
Affected Products: n/a
References: [{'name': '20050422 [SePro Bugtraq] WBB - WoltLab Burning Board <= 2.3.1 - XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111420516900814&w=2'}, {'name': '1013790', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013790'}, {'name': '15058', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15058'}, {'name': '13325', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13325'}]
CVE State: PUBLISHED
Explain CVE-2005-1286
Unquoted Windows search path vulnerability in BitDefender 8 allows local users to prevent BitDefender from starting by creating a malicious C:\program.exe, possibly due to the lack of quoting of the full pathname when executing a process.
Affected Products: n/a
References: [{'name': '20050422 BitDefender 8 - Race condition vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111420400316397&w=2'}, {'name': '15818', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15818'}, {'name': '15076', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15076'}]
CVE State: PUBLISHED
Explain CVE-2005-1287
Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp.
Affected Products: n/a
References: [{'name': '15784', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15784'}, {'name': '20060423 BK Forum <= 4.0 Remote SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431863/100/0/threaded'}, {'name': '15786', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15786'}, {'name': '20050423 Multiple Sql injection vulnerabilities in BK Forum v.4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111428133317901&w=2'}, {'name': '15072', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15072'}, {'name': '1013793', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013793'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalparadox.org/advisories/bkdev.txt'}, {'name': '15785', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15785'}, {'name': '20060421 BK Forum <<--V.4.0 SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431659/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2005-1288
inc_login_check.asp ACS Blog 0.8 through 1.1.3 allows remote attackers to gain administrator privileges via the "in" value in a cookie.
Affected Products: n/a
References: [{'name': '15787', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15787'}, {'name': '1013795', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013795'}, {'name': '15105', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15105'}, {'name': '20050423 ACSblog bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111428190921388&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1289
index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and possibly (2) cat parameters.
Affected Products: n/a
References: [{'name': '1013780', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013780'}, {'name': '15054', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15054'}, {'name': '20050423 E-Cart v1.1 Remote Command Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111428818425864&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1290
Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) u parameter to profile.php, (2) highlight parameter to viewtopic.php, or (3) forumname or forumdesc parameters to admin_forums.php.
Affected Products: n/a
References: [{'name': '20050423 -==phpBB 2.0.14 Multiple Vulnerabilities==-', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111428283721756&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://neosecurityteam.net/Advisories/Advisory-14.txt'}]
CVE State: PUBLISHED
Explain CVE-2005-1291
Multiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) addToCart.asp or (2) productDetails.asp, the (3) priceFrom, (4) idCategory, or (5) priceTo parameter to searchResults.asp, or (6) the idParentCategory parameter to productCatalogSubCats.asp.
Affected Products: n/a
References: [{'name': '15773', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15773'}, {'name': '1013792', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013792'}, {'name': '15771', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15771'}, {'name': '15772', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15772'}, {'name': '20050423 Multiple Sql injection and XSS in CartWIZ ASP Cart', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111428393022389&w=2'}, {'name': '15774', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15774'}, {'name': '15055', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15055'}, {'name': 'cartwiz-multiple-sql-injection(20246)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20246'}]
CVE State: PUBLISHED
Explain CVE-2005-1292
Multiple cross-site scripting (XSS) vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via the idProduct parameter to (1) tellAFriend.asp or (2) addToWishlist.asp, redirect parameter to (3) access.asp or (4) login.asp, message parameter to (5) login.asp or (6) error.asp, or (7) sku or (8) name parameter to searchResults.asp.
Affected Products: n/a
References: [{'name': '1013792', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013792'}, {'name': '15776', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15776'}, {'name': '15777', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15777'}, {'name': '15778', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15778'}, {'name': '20050423 Multiple Sql injection and XSS in CartWIZ ASP Cart', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111428393022389&w=2'}, {'name': 'cartwiz-multiple-script-xss(20249)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20249'}, {'name': '15775', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15775'}, {'name': '15055', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15055'}, {'name': '15780', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15780'}]
CVE State: PUBLISHED
Explain CVE-2005-1293
Multiple SQL injection vulnerabilities in default.asp in StorePortal 2.63 allow remote attackers to execute arbitrary SQL commands via the (1) language, (2) bpic, (3) idcategory, (4) content, (5) keyword, or (6) idproduct parameter.
Affected Products: n/a
References: [{'name': '20050424 Multiple SQL Injections in StorePortal 2.63', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111445131808328&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://digitalparadox.org/advisories/storeportal.txt'}, {'name': '15071', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15071'}]
CVE State: PUBLISHED
Explain CVE-2005-1294
The affix_sock_register in the Affix Bluetooth Protocol Stack for Linux might allow local users to gain privileges via a socket call with a negative protocol value, which is used as an array index.
Affected Products: n/a
References: [{'name': "20050424 DMA[2005-0423a] - 'Nokia Affix Bluetooth Integer Underflow'", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111445064725591&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalmunition.com/DMA%5B2005-0423a%5D.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://affix.sourceforge.net/patch_hci_3_2_0'}]
CVE State: PUBLISHED
Explain CVE-2005-1295
include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
Affected Products: n/a
References: [{'name': '20050425 remote command execution in include.cgi script', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111445189816161&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1296
include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
Affected Products: n/a
References: [{'name': '20050425 remote command execution in include.cgi script', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111445189816161&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1297
Cross-site scripting (XSS) vulnerability in the include.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.
Affected Products: n/a
References: [{'name': '20050425 remote command execution in include.cgi script', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111445189816161&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1298
The inserter.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
Affected Products: n/a
References: [{'name': '20050425 remote command execution in inserter.cgi script', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111444807013846&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1299
The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
Affected Products: n/a
References: [{'name': '20050425 remote command execution in inserter.cgi script', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111444807013846&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1300
Cross-site scripting (XSS) vulnerability in the inserter.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.
Affected Products: n/a
References: [{'name': '20050425 remote command execution in inserter.cgi script', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111444807013846&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1301
nProtect:Netizen 2005.3.17.1 does not properly verify that the update module is downloaded from an authorized site, which allows remote malicious web sites to write arbitrary files.
Affected Products: n/a
References: [{'name': '20050425 [SNS Advisory No.80] nProtect:Netizen Arbitrary File Download Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111444390329376&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/80_e.html'}, {'name': '15101', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15101'}, {'name': '15788', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15788'}, {'tags': ['x_refsource_MISC'], 'url': 'http://jvn.jp/jp/JVN%23AF02FB4B/index.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1302
SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via the "change user" field.
Affected Products: n/a
References: [{'name': '694', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/694'}, {'name': '13355', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13355'}, {'name': '15121', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15121'}, {'name': '20050425 Sql Injection in Confixx 3.06 & 3.08 & 3.?? ?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111444886429814&w=2'}, {'name': '15815', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15815'}]
CVE State: PUBLISHED
Explain CVE-2005-1303
The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.
Affected Products: n/a
References: [{'name': '20050424 remote command execution in citat.pl script', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111445477910178&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1304
The citat.pl script allows remote attackers to execute arbitrary files via shell metacharacters in the argument.
Affected Products: n/a
References: [{'name': '20050424 remote command execution in citat.pl script', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111445477910178&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1305
The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
Affected Products: n/a
References: [{'name': '20050424 hyper.cgi script file show bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111445410220152&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1306
The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulnerability."
Affected Products: n/a
References: [{'name': '13962', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13962'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/techdocs/331710.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1307
The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory to find and execute the productname.sh script, which allows local users to execute arbitrary code by copying and calling the scripts from a user-controlled directory.
Affected Products: n/a
References: [{'name': '13399', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13399'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/techdocs/331621.html'}, {'name': '12297', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/12297'}, {'name': '20041206 Local root exploit on Mac OS X with Adobe Version Cue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2004-12/0040.html'}, {'name': '1012446', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012446'}, {'name': '11833', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11833'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/exploits/5EP0D20FQC.html'}, {'name': '12298', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/12298'}, {'name': '20050516 Mac OS X - Adobe Version Cue local root exploit [c version exploit]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111627622403544&w=2'}, {'name': 'version-cue-gain-privileges(18445)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18445'}]
CVE State: PUBLISHED
Explain CVE-2005-1308
SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML.
Affected Products: n/a
References: [{'name': '13374', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13374'}, {'name': '15119', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15119'}]
CVE State: PUBLISHED
Explain CVE-2005-1309
Cross-site scripting (XSS) vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the (1) entry title field or (2) comment body text.
Affected Products: n/a
References: [{'name': '1013811', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013811'}, {'name': '15754', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15754'}, {'name': '15755', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15755'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sourceforge.net/tracker/index.php?func=detail&aid=1188735&group_id=81992&atid=564683'}]
CVE State: PUBLISHED
Explain CVE-2005-1310
SQL injection vulnerability in bBlog 0.7.4 allows remote attackers to execute arbitrary SQL commands via the postid parameter.
Affected Products: n/a
References: [{'name': '15756', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15756'}, {'name': '1013811', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013811'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sourceforge.net/tracker/index.php?func=detail&aid=1188735&group_id=81992&atid=564683'}]
CVE State: PUBLISHED
Explain CVE-2005-1311
Cross-site scripting (XSS) vulnerability in Yappa-NG before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected Products: n/a
References: [{'name': '15107', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15107'}, {'name': '13372', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13372'}, {'name': '15828', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15828'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=323206'}]
CVE State: PUBLISHED
Explain CVE-2005-1312
PHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to execute arbitrary PHP code via unknown vectors.
Affected Products: n/a
References: [{'name': '15107', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15107'}, {'name': '15829', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15829'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=323206'}, {'name': '13371', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13371'}]
CVE State: PUBLISHED
Explain CVE-2005-1313
Cross-site scripting (XSS) vulnerability in Horde Passwd module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Affected Products: n/a
References: [{'name': '15075', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15075'}, {'name': '[sork] 20050422 Passwd 2.2.2 (final)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.horde.org/archives/sork/Week-of-Mon-20050418/002147.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.horde.org/diff.php/passwd/docs/CHANGES?r1=1.1.1.1.2.28&r2=1.1.1.1.2.33&ty=h'}]
CVE State: PUBLISHED
Explain CVE-2005-1314
Cross-site scripting (XSS) vulnerability in Horde Kronolith module before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Affected Products: n/a
References: [{'name': '15080', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15080'}, {'name': '[kronolith] 20050422 Kronolith 1.1.4 (final)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.horde.org/archives/kronolith/Week-of-Mon-20050418/005347.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.horde.org/diff.php/kronolith/docs/CHANGES?r1=1.69.2.39&r2=1.69.2.41&ty=h'}]
CVE State: PUBLISHED
Explain CVE-2005-1315
Cross-site scripting (XSS) vulnerability in Horde Turba module before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Affected Products: n/a
References: [{'name': '15074', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15074'}, {'name': '[turba] 20050422 Turba 1.2.5 (final)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.horde.org/archives/turba/Week-of-Mon-20050418/004182.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.horde.org/diff.php/turba/docs/CHANGES?r1=1.61.2.74&r2=1.61.2.77&ty=h'}]
CVE State: PUBLISHED
Explain CVE-2005-1316
Cross-site scripting (XSS) vulnerability in Horde Accounts module before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Affected Products: n/a
References: [{'name': '15081', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15081'}, {'name': '[sork] 20050422 Accounts 2.1.2 (final)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.horde.org/archives/sork/Week-of-Mon-20050418/002146.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.horde.org/diff.php/accounts/docs/CHANGES?r1=1.1.1.1.2.15&r2=1.1.1.1.2.18&ty=h'}]
CVE State: PUBLISHED
Explain CVE-2005-1317
Cross-site scripting (XSS) vulnerability in Horde Chora module before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Affected Products: n/a
References: [{'name': '15083', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15083'}, {'name': '20050422 Chora 1.2.3 (final)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.horde.org/archives/chora/Week-of-Mon-20050418/004050.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.horde.org/diff.php/chora/docs/CHANGES?r1=1.45.2.34&r2=1.45.2.37&ty=h'}]
CVE State: PUBLISHED
Explain CVE-2005-1318
Cross-site scripting (XSS) vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Affected Products: n/a
References: [{'name': '[sork] 20050422 Forwards 2.2.2 (final)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.horde.org/archives/sork/Week-of-Mon-20050418/002145.html'}, {'name': '15082', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15082'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.horde.org/diff.php/forwards/docs/CHANGES?r1=1.1.1.1.2.20&r2=1.1.1.1.2.23&ty=h'}]
CVE State: PUBLISHED
Explain CVE-2005-1319
Cross-site scripting (XSS) vulnerability in Horde IMP Webmail client before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Affected Products: n/a
References: [{'name': '15080', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15080'}, {'name': '[imp] 20050422 IMP 3.2.8 (final)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.horde.org/archives/imp/Week-of-Mon-20050418/041912.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.horde.org/diff.php/imp/docs/CHANGES?r1=1.389.2.119&r2=1.389.2.125&ty=h'}]
CVE State: PUBLISHED
Explain CVE-2005-1320
Cross-site scripting (XSS) vulnerability in Horde Mnemo Note Manager before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Affected Products: n/a
References: [{'name': '[mnemo] 20050422 Mnemo 1.1.4 (final)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.horde.org/archives/mnemo/Week-of-Mon-20050418/000166.html'}, {'name': '15078', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15078'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.horde.org/diff.php/mnemo/docs/CHANGES?r1=1.4.2.31&r2=1.4.2.33&ty=h'}]
CVE State: PUBLISHED
Explain CVE-2005-1321
Cross-site scripting (XSS) vulnerability in Horde Vacation module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Affected Products: n/a
References: [{'name': '15073', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15073'}, {'name': '[sork] 20050422 Vacation 2.2.2 (final)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.horde.org/archives/sork/Week-of-Mon-20050418/002148.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.horde.org/diff.php/vacation/docs/CHANGES?r1=1.1.1.1.2.21&r2=1.1.1.1.2.26&ty=h'}]
CVE State: PUBLISHED
Explain CVE-2005-1322
Cross-site scripting (XSS) vulnerability in Horde Nag Task List Manager before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Affected Products: n/a
References: [{'name': '[nag] 20050422 Nag 1.1.3 (final)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.horde.org/archives/nag/Week-of-Mon-20050418/000756.html'}, {'name': '15079', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15079'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.horde.org/diff.php/nag/docs/CHANGES?r1=1.54.2.33&r2=1.54.2.35&ty=h'}]
CVE State: PUBLISHED
Explain CVE-2005-1323
Buffer overflow in NetFtpd for NetTerm 5.1.1 and earlier allows remote attackers to execute arbitrary code via a long USER command.
Affected Products: n/a
References: [{'name': '15140', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15140'}, {'name': "20050426 ADV: NetTerm's NetFtpd 4.2.2 Buffer Overflow + PoC Exploit", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/396959'}, {'name': '13396', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13396'}, {'name': 'ADV-2005-0407', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0407'}, {'name': 'netterm-netftpd-user-bo(20285)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20285'}, {'name': '15865', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15865'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.securenetterm.com/html/what_s_new.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1324
Multiple cross-site scripting (XSS) vulnerabilities in index.php for phpMyVisites allow remote attackers to inject arbitrary web script or HTML via the (1) part, (2) per, or (3) site parameters.
Affected Products: n/a
References: [{'name': 'phpmyvisites-index-xss(20255)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20255'}, {'name': '15789', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15789'}, {'name': '15084', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15084'}, {'name': 'ADV-2005-0378', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0378'}]
CVE State: PUBLISHED
Explain CVE-2005-1325
set_lang.php in phpMyVisites 1.3 allows remote attackers to read and include arbitrary files via the mylang parameter.
Affected Products: n/a
References: [{'name': '20050426 [exploits] phpMyVisites 1.3 local file retrieval', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111454298603060&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.sourceforge.net/viewcvs.py/phpmyvisites/phpmyvisites/include/set_lang.php?r1=1.5&r2=1.6'}, {'name': '13370', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13370'}]
CVE State: PUBLISHED
Explain CVE-2005-1326
Buffer overflow in VooDoo cIRCle BOTNET before 1.0.33 allows remote authenticated attackers to cause a denial of service (client crash) via a crafted packet.
Affected Products: n/a
References: [{'name': '15830', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15830'}, {'name': '15110', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15110'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=323254'}]
CVE State: PUBLISHED
Explain CVE-2005-1327
Cross-site scripting (XSS) vulnerability in pms.php for Woltlab Burning Board 2.3.1 PL2 and earlier allows remote attackers to inject arbitrary web script or HTML via the folderid parameter.
Affected Products: n/a
References: [{'name': '13353', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13353'}, {'name': '20050424 WoltLab Burning Board <= 2.3.1 PL2 - XSS Vulnerability (24.04.05)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/396858'}]
CVE State: PUBLISHED
Explain CVE-2005-1328
OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnections/chksettings.asp.
Affected Products: n/a
References: [{'name': '1013782', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013782'}, {'name': '13322', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13322'}, {'name': '15724', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15724'}, {'name': '15057', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15057'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oneworldstore.com/support_security_issue_updates.asp#April_20_2005_Lostmon'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lostmon.blogspot.com/2005/04/oneworldstore-critical-failure.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1329
owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parameter.
Affected Products: n/a
References: [{'name': '1013796', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013796'}, {'name': '13361', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13361'}, {'name': '15104', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15104'}, {'name': '15781', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15781'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oneworldstore.com/support_security_issue_updates.asp#April_24_2005_Lostmon'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lostmon.blogspot.com/2005/04/oneworldstore-user-information.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1330
AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service (Cocoa application crash) via a malformed TIFF image that causes the NXSeek to use an incorrect offset, leading to an unhandled exception.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2005-05-03', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1331
The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could allow remote attackers to trick users into executing malicious code via certain URI characters such as NULL, control characters, and homographs.
Affected Products: n/a
References: [{'name': '13480', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13480'}, {'name': '15227', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15227'}, {'name': 'ADV-2005-0455', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0455'}, {'tags': ['x_refsource_MISC'], 'url': 'http://remahl.se/david/vuln/010/'}, {'name': 'APPLE-SA-2005-05-03', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1332
Bluetooth-enabled systems in Mac OS X 10.3.9 enables the Bluetooth file exchange service by default, which allows remote attackers to access files without the user being notified, and local users to access files via the default directory.
Affected Products: n/a
References: [{'name': 'TA05-136A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA05-136A.html'}, {'name': 'VU#258390', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/258390'}, {'name': 'APPLE-SA-2005-05-03', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/May/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=301381'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalmunition.com/DMA%5B2005-0502a%5D.txt'}]
CVE State: PUBLISHED