Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2005-0623
Buffer overflow in RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to execute arbitrary code via a long URL.
Affected Products: n/a
References: [{'name': '20050301 [SIG^2 G-TEC] RaidenHTTPD Server Buffer Overflow and CGI Source Disclosure Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110969702013313&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/raidenhttpd1132.html'}, {'name': '14453', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14453'}]
CVE State: PUBLISHED
Explain CVE-2005-0624
reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295407'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.ubuntu.com/show_bug.cgi?id=6600'}, {'name': 'reportbug-file-world-readable(19504)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19504'}, {'name': '20050228 [USN-88-1] reportbug information disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110972153627388&w=2'}, {'name': '14422', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14422/'}]
CVE State: PUBLISHED
Explain CVE-2005-0625
reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.ubuntu.com/show_bug.cgi?id=6600'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.ubuntu.com/show_bug.cgi?id=6717'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295407'}, {'name': 'reportbug-smtppasswd-information-disclosure(19520)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19520'}, {'name': '20050228 [USN-88-1] reportbug information disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110972153627388&w=2'}, {'name': '14422', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14422/'}]
CVE State: PUBLISHED
Explain CVE-2005-0626
Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-setcookie'}, {'name': 'FLSA-2006:152809', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://fedoranews.org/updates/FEDORA--.shtml'}, {'name': '12716', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12716'}, {'name': 'USN-93-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/93-1/'}, {'name': 'squid-set-cookie-race-condition(19581)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19581'}, {'name': 'oval:org.mitre.oval:def:11169', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11169'}, {'name': 'RHSA-2005:415', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-415.html'}]
CVE State: PUBLISHED
Explain CVE-2005-0627
Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless of the LD_LIBRARY_PATH environment variable, which allows local users to execute arbitrary programs.
Affected Products: n/a
References: [{'name': '12695', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12695'}, {'name': 'GLSA-200503-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200503-01.xml'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=75181'}]
CVE State: PUBLISHED
Explain CVE-2005-0628
Multiple cross-site scripting (XSS) vulnerabilities in Forumwa 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter in search.php or the (2) body or (3) subject of a forum message.
Affected Products: n/a
References: [{'name': '14418', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14418'}, {'name': '20050301 Forumwa search.php xss vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110971101826900&w=2'}, {'name': '12689', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12689'}]
CVE State: PUBLISHED
Explain CVE-2005-0629
Multiple cross-site scripting (XSS) vulnerabilities in profile.php in 427BB 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) Avatar parameters.
Affected Products: n/a
References: [{'name': '14434', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14434'}, {'name': '12693', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12693'}, {'name': '20050301 427BB profile.php XSS vulnerability.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110970911514167&w=2'}, {'name': '1013337', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013337'}, {'name': '427bb-profile-xss(19546)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19546'}, {'name': '20050301 427BB profile.php XSS vulnerability.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110970474726113&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-0630
sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter.
Affected Products: n/a
References: [{'name': 'pblang-sendpm-obtain-information(19544)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19544'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://pblforum.drmartinus.de/post.php?cat=2&fid=2&pid=40&page=1'}, {'name': '20050301 Software PBLang 4.63 sendpm.php reply file read vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110971002211589&w=2'}, {'name': '12690', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12690'}]
CVE State: PUBLISHED
Explain CVE-2005-0631
delpm.php in PBLang 4.63 allows remote authenticated users to delete arbitrary PM files by modifying the "id" and "a" parameters.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://pblforum.drmartinus.de/post.php?cat=2&fid=2&pid=42&page=1'}, {'name': '20050301 Software PBLang 4.63 delpm.php authentication vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110970738214608&w=2'}, {'name': 'pblang-delpm-delete-messages(19552)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19552'}, {'name': '12694', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12694'}]
CVE State: PUBLISHED
Explain CVE-2005-0632
PHP remote file inclusion vulnerability in auth.php in PHPNews 1.2.4 and possibly 1.2.3, allows remote attackers to execute arbitrary PHP code via the path parameter.
Affected Products: n/a
References: [{'name': '1013345', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013345'}, {'name': '12696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12696'}, {'name': '20050303 PHP News <= 1.2.4 - Remote File Inclusion Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110989169008570&w=2'}, {'name': '20050301 PHP News <= 1.2.4 - Remote File Inclusion (VXSfx)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110971663824719&w=2'}, {'name': '14449', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14449'}]
CVE State: PUBLISHED
Explain CVE-2005-0633
Buffer overflow in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via a crafted PNG image file.
Affected Products: n/a
References: [{'name': 'ADV-2005-0221', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0221'}, {'name': '12703', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12703'}, {'name': '20050306 See-security advisory: Trillian Basic 3.0 PNG Processing Buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111023000624809&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/exploits/5KP030KF5E.html'}]
CVE State: PUBLISHED
Explain CVE-2005-0634
Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/golden_heap.html'}, {'name': '12704', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12704'}, {'name': 'ADV-2006-4936', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/4936'}, {'name': '23323', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23323'}, {'name': '20050302 Golden Ftp server 1.29 Username remote Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/391987'}]
CVE State: PUBLISHED
Explain CVE-2005-0635
Buffer overflow in Foxmail Server 2.0 allows remote attackers to execute arbitrary code via a long USER command.
Affected Products: n/a
References: [{'name': '20050302 Foxmail server "USER" command Multiple remote buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/391960'}, {'name': '12711', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12711'}, {'name': '1013356', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013356'}, {'name': '14145', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14145'}]
CVE State: PUBLISHED
Explain CVE-2005-0636
Format string vulnerability in Foxmail Server 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the USER command.
Affected Products: n/a
References: [{'name': '20050302 Foxmail server "USER" command Multiple remote buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/391960'}, {'name': '12711', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12711'}, {'name': '1013356', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013356'}, {'name': '14145', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14145'}]
CVE State: PUBLISHED
Explain CVE-2005-0637
The copy functions in locore.s such as copyout in OpenBSD 3.5 and 3.6, and possibly other BSD based operating systems, may allow attackers to exceed certain address boundaries and modify kernel memory.
Affected Products: n/a
References: [{'name': '20050228 011: SECURITY FIX: February 28, 2005   i386 only', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata.html#copy'}, {'name': '1013333', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013333'}, {'name': '20050316 012: SECURITY FIX: March 16, 2005   amd64 only', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata.html#copy'}, {'name': '20050228 028: SECURITY FIX: February 28, 2005', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata35.html#locore'}, {'name': '12825', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12825'}, {'name': '14432', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14432'}, {'name': 'openbsd-copy-functions(19531)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19531'}]
CVE State: PUBLISHED
Explain CVE-2005-0638
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
Affected Products: n/a
References: [{'name': '12712', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12712'}, {'name': 'GLSA-200503-05', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200503-05.xml'}, {'name': '14459', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14459'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=79762'}, {'name': 'DSA-695', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-695'}, {'name': 'RHSA-2005:332', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-332.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2005-134_RHSA-2005-332.pdf'}, {'name': '14462', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14462'}, {'name': 'oval:org.mitre.oval:def:10898', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10898'}, {'name': 'FLSA-2006:152923', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/433935/30/5010/threaded'}, {'name': '14365', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/14365'}]
CVE State: PUBLISHED
Explain CVE-2005-0639
Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management errors" from certain image properties, some of which may be related to integer overflows in PPM files.
Affected Products: n/a
References: [{'name': 'GLSA-200503-05', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200503-05.xml'}, {'name': '14459', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14459'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=79762'}, {'name': 'DSA-695', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-695'}]
CVE State: PUBLISHED
Explain CVE-2005-0640
Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 does not properly initialize the "Change Credentials for Database" window, which allows local users to recover the SQL Admin password via certain methods.
Affected Products: n/a
References: [{'name': '14454', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14454'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323'}]
CVE State: PUBLISHED
Explain CVE-2005-0641
Cross-site scripting (XSS) vulnerability in the Reporter for Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 allows remote attackers to inject arbitrary HTML or web script via the (1) name or (2) description in a report template.
Affected Products: n/a
References: [{'name': '14454', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14454'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323'}]
CVE State: PUBLISHED
Explain CVE-2005-0642
SQL injection vulnerability in the Query Designer for Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 allows remote attackers to execute arbitrary SQL via an imported file.
Affected Products: n/a
References: [{'name': '14454', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14454'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323'}]
CVE State: PUBLISHED
Explain CVE-2005-0643
Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary code via crafted LHA files.
Affected Products: n/a
References: [{'name': '10243', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10243'}, {'name': '14628', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14628'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdf'}]
CVE State: PUBLISHED
Explain CVE-2005-0644
Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4436 allows remote attackers to execute arbitrary code via a malformed LHA file with a type 2 header file name field, a variant of CVE-2005-0643.
Affected Products: n/a
References: [{'name': 'VU#361180', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/361180'}, {'name': '10243', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10243'}, {'name': '12832', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12832'}, {'name': '20050317 McAfee AntiVirus Library Stack Overflow', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/xforce/alerts/id/190'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdf'}, {'name': '14628', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14628'}, {'name': '1013463', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013463'}]
CVE State: PUBLISHED
Explain CVE-2005-0645
Cross-site scripting (XSS) vulnerability in show.inc.php in cuteNews 1.3.6 allows remote attackers to inject arbitrary HTML, web script, and PHP code via the (1) CLIENT-IP or (2) X-FORWARDED-FOR header in an HTTP POST request to show_news.php.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.kernelpanik.org/docs/kernelpanik/cutenews.txt'}, {'name': '20050301 Kernelpanik Labs Digest 2005-2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110969774502370&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-0646
SQL injection vulnerability in auth.php in paNews 2.0.4b allows remote attackers to execute arbitrary SQL via the mysql_prefix parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.kernelpanik.org/docs/kernelpanik/panews.txt'}, {'name': '20050301 Kernelpanik Labs Digest 2005-2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110969774502370&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-0647
admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1) $form[comments] or (2) $form[autoapprove] parameters, which are written to config.php.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.kernelpanik.org/docs/kernelpanik/panews.txt'}, {'name': '20050301 Kernelpanik Labs Digest 2005-2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110969774502370&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-0648
Multiple vulnerabilities in Pixel-Apes SafeHTML before 1.3.0 allow remote attackers to bypass cross-site scripting (XSS) protection via (1) "decimal HTML entities" or (2) "the \x00 symbol."
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://pixel-apes.com/safehtml/feed'}, {'name': '1013315', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013315'}]
CVE State: PUBLISHED
Explain CVE-2005-0649
Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting (XSS) protection via "hexadecimal HTML entities."
Affected Products: n/a
References: [{'name': '13869', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13869'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://pixel-apes.com/safehtml/feed'}]
CVE State: PUBLISHED
Explain CVE-2005-0650
Multiple cross-site scripting (XSS) vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to inject arbitrary web script or HTML via (1) the pages parameter to divers.php (incorrectly referred to as "drivers.php" by some sources), (2) in the search feature text area, (3) forum name, (4) site name or (5) the maximum avatar size in the option section, (5) new category or (6) new forum fields in the forum section.
Affected Products: n/a
References: [{'name': 'projectbb-multiple-xss(19556)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19556'}, {'name': '14533', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14533'}, {'name': '12709', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12709'}, {'name': '20050308 failles dans ProjectBB v0.4.5.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111031893610270&w=2'}, {'name': 'ADV-2005-0223', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0223'}, {'name': '1013332', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013332'}]
CVE State: PUBLISHED
Explain CVE-2005-0651
Multiple SQL injection vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to execute arbitrary SQL commands via (1) liste or (2) desc parameters to divers.php (incorrectly referred to as "drivers.php" by some sources), (3) the search feature text area, (4) post name in the post creation feature, (5) City, (6) Homepage, (7) ICQ, (8) AOL, (9) Yahoo!, (10) MSN, or (11) e-mail fields in the profile feature or (12) the new field in the moderator section.
Affected Products: n/a
References: [{'name': '12710', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12710'}, {'name': '14533', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14533'}, {'name': '20050308 failles dans ProjectBB v0.4.5.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111031893610270&w=2'}, {'name': 'ADV-2005-0223', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0223'}, {'name': '1013332', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013332'}, {'name': 'projectbb-mulitple-sql-injection(19557)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19557'}]
CVE State: PUBLISHED
Explain CVE-2005-0652
Unknown vulnerability in HP OpenVMS VAX 7.x and 6.x and OpenVMS Alpha 7.x or 6.x allows local users to access privileged files.
Affected Products: n/a
References: [{'name': 'openvms-gain-access(19566)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19566'}, {'name': 'SSRT4866', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=110980700101451&w=2'}, {'name': '14444', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14444'}]
CVE State: PUBLISHED
Explain CVE-2005-0653
phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name, which grants remote authenticated users more privileges than intended.
Affected Products: n/a
References: [{'name': 'GLSA-200503-07', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200503-07.xml'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=83792'}]
CVE State: PUBLISHED
Explain CVE-2005-0654
gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of service (application crash) via the image descriptor (1) height or (2) width fields set to zero.
Affected Products: n/a
References: [{'name': '20050304 GIMP gifload.exe GIF file (image width)*(image height)==0 DOS vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110995346018830&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-0655
auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) hal.php, or (3) arsip.php, which reveals the path in a PHP error message.
Affected Products: n/a
References: [{'name': '20050302 Vulnerabilities in Aura CMS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110979842315750&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://echo.or.id/adv/adv011-y3dips-2005.txt'}, {'name': '1013357', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013357'}]
CVE State: PUBLISHED
Explain CVE-2005-0656
Multiple cross-site scripting (XSS) vulnerabilities in auraCMS 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) hits parameter to hits.php, (2) query parameter to index.php, or (3) theCount parameter to counter.php.
Affected Products: n/a
References: [{'name': '20050302 Vulnerabilities in Aura CMS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110979842315750&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://echo.or.id/adv/adv011-y3dips-2005.txt'}, {'name': '1013357', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013357'}, {'name': '14458', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14458'}]
CVE State: PUBLISHED
Explain CVE-2005-0657
Directory traversal vulnerability in Computalynx CProxy 3.3.x and 3.4.x through 3.4.4 allows remote attackers to read arbitrary files or cause a denial of service (application crash) via a .. (dot dot) in an HTTP request.
Affected Products: n/a
References: [{'name': '14461', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14461'}, {'name': 'computalynx-cproxy-get-dos(19574)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19574'}, {'name': 'computalynx-cproxy-directory-traversal(19573)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19573'}, {'name': '20050302 Security Advisory: Computalynx CProxy Server Multiple Remote Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110980096304013&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-0658
SQL injection vulnerability in a third party extension to TYPO3 allows remote attackers to execute arbitrary SQL commands via the category_uid parameter.
Affected Products: n/a
References: [{'name': '20050304 RE: TYPO3 SQL Injection vunerabilitie', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110995289619649&w=2'}, {'name': '20050303 TYPO3 SQL Injection vunerabilitie', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110987892618892&w=2'}, {'name': '14465', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14465'}, {'name': '20050304 Re: TYPO3 SQL Injection vunerabilitie', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110996536620069&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-0659
phpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct request to oracle.php, which reveals the path in a PHP error message.
Affected Products: n/a
References: [{'name': '20050304 -==phpBB 2.0.13 Full path disclosure==-', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110996579900134&w=2'}, {'name': '1013377', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013377'}, {'tags': ['x_refsource_MISC'], 'url': 'http://neosecurityteam.net/Advisories/Advisory-09.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://neosecurityteam.tk/index.php?pagina=advisories&id=9'}]
CVE State: PUBLISHED
Explain CVE-2005-0660
Multiple cross-site scripting (XSS) vulnerabilities in D-Forum 1.11 allows remote attackers to inject arbitrary web script or HTML via certain fields, as demonstrated using the page parameter in nav.php3.
Affected Products: n/a
References: [{'name': '14464', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14464'}, {'name': '1013349', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013349'}]
CVE State: PUBLISHED
Explain CVE-2005-0661
SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) lastvisit cookie.
Affected Products: n/a
References: [{'name': '14450', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14450'}, {'name': '1013351', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013351'}]
CVE State: PUBLISHED
Explain CVE-2005-0662
Cross-site scripting (XSS) vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the Avatar field.
Affected Products: n/a
References: [{'name': '14414', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14414'}, {'name': '14308', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/14308'}]
CVE State: PUBLISHED
Explain CVE-2005-0663
SQL injection vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary SQL commands via the f parameter.
Affected Products: n/a
References: [{'name': '14414', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14414'}, {'name': 'mercuryboard-index-sql-injection(19051)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19051'}, {'name': '14308', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/14308'}]
CVE State: PUBLISHED
Explain CVE-2005-0664
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.
Affected Products: n/a
References: [{'name': '1013398', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013398'}, {'name': '102041', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-102041-1'}, {'name': 'DSA-709', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-709'}, {'name': 'USN-91-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/91-1/'}, {'name': 'GLSA-200503-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200503-17.xml'}, {'name': 'ADV-2005-0240', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0240'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.ubuntu.com/show_bug.cgi?id=7152'}, {'name': 'ADV-2005-2565', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/2565'}, {'name': 'oval:org.mitre.oval:def:10832', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10832'}, {'name': '17705', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17705'}, {'name': 'MDKSA-2005:064', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:064'}, {'name': 'RHSA-2005:300', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-300.html'}]
CVE State: PUBLISHED
Explain CVE-2005-0665
Format string vulnerability in xv before 3.10a allows remote attackers to execute arbitrary code via format string specifiers in a filename.
Affected Products: n/a
References: [{'name': 'GLSA-200503-09', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200503-09.xml'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=83686'}]
CVE State: PUBLISHED
Explain CVE-2005-0666
Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, allows local users and possibly remote attackers to bypass intended access restrictions and execute arbitrary code.
Affected Products: n/a
References: [{'name': '12729', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12729'}, {'name': '20050305 PaX privilege elevation security bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/392348'}, {'name': '14489', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14489'}]
CVE State: PUBLISHED
Explain CVE-2005-0667
Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sylpheed.good-day.net/changelog-devel.html.en'}, {'name': '1013376', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013376'}, {'name': 'RHSA-2005:303', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-303.html'}, {'name': 'GLSA-200503-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200503-26.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sylpheed.good-day.net/changelog.html.en'}, {'name': '14491', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14491'}]
CVE State: PUBLISHED
Explain CVE-2005-0668
Unknown vulnerability in HTTP Anti Virus Proxy (HAVP) before 0.51 prevents viruses from being properly detected in certain files such as (1) .CAB or (2) .ZIP files.
Affected Products: n/a
References: [{'name': '1013370', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013370'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bemberg.de/server-side/index.htm'}]
CVE State: PUBLISHED
Explain CVE-2005-0669
Multiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 through 1.2.1b allow remote attackers to execute arbitrary SQL commands via the (1) the faq_id in the faq mod, (2) the id parameter in the pages mod, (3) the id parameter in the siteinfo module, (4) the topic_id parameter in the articles module, (5) the ord_id in the orders module, (6) the dom_id parameter in the domains module, or (7) the invd_id parameter in the invoices module.
Affected Products: n/a
References: [{'name': '14439', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14439'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://forums.phpcoin.com/index.php?showtopic=4118'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lostmon.blogspot.com/2005/03/phpcoin-posible-sql-injection-comands.html'}, {'name': 'phpcoin-id-sql-injection(19571)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19571'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://forums.phpcoin.com/index.php?showtopic=4101'}, {'name': '1013329', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013329'}, {'name': '12686', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12686'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://forums.phpcoin.com/index.php?showtopic=4116'}]
CVE State: PUBLISHED
Explain CVE-2005-0670
Cross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 through 1.2.1b allows remote attackers to inject arbitrary web script or HTML via (1) the new parameter to mod.php, (2) the w parameter to mod.php, (3) the e parameter to login.php, (4) the o parameter to login.php, and possibly other scripts.
Affected Products: n/a
References: [{'name': '14439', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14439'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://forums.phpcoin.com/index.php?showtopic=4118'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lostmon.blogspot.com/2005/03/phpcoin-posible-sql-injection-comands.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://forums.phpcoin.com/index.php?showtopic=4101'}, {'name': '1013329', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013329'}, {'name': '12686', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12686'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://forums.phpcoin.com/index.php?showtopic=4116'}, {'name': 'phpcoin-xss(19572)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19572'}]
CVE State: PUBLISHED
Explain CVE-2005-0671
Format string vulnerability in Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via format string specifiers in a command.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/ca3dex-adv.txt'}, {'name': '14483', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14483'}, {'name': '12727', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12727'}, {'name': '1013361', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013361'}]
CVE State: PUBLISHED
Explain CVE-2005-0672
Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via text strings that are not null terminated, which triggers a null dereference.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/ca3dex-adv.txt'}, {'name': '14483', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14483'}, {'name': '12727', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12727'}, {'name': '1013361', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013361'}]
CVE State: PUBLISHED
Explain CVE-2005-0673
Cross-site scripting (XSS) vulnerability in usercp_register.php for phpBB 2.0.13 allows remote attackers to inject arbitrary web script or HTML by setting the (1) allowhtml, (2) allowbbcode, or (3) allowsmilies parameters to inject HTML into signatures for personal messages, possibly when they are processed by privmsg.php or viewtopic.php.
Affected Products: n/a
References: [{'name': '1013362', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013362'}, {'tags': ['x_refsource_MISC'], 'url': 'http://neosecurityteam.tk/index.php?pagina=advisories&id=8'}, {'name': '14475', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14475'}]
CVE State: PUBLISHED
Explain CVE-2005-0674
Cross-site scripting (XSS) vulnerability in the News module for paBox 1.6 allows remote attackers to inject arbitrary web script or HTML via the text hidden parameter in an HTTP POST request.
Affected Products: n/a
References: [{'name': '14474', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14474'}, {'name': '1013363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013363'}, {'name': '12719', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12719'}, {'name': '20050303 [XSS] paBox 1.6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110987537431541&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-0675
Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.5 allows remote attackers to inject arbitrary web script or HTML via the (1) list or (2) frommethod parameters.
Affected Products: n/a
References: [{'name': '9497', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/9497'}, {'name': '1013365', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013365'}]
CVE State: PUBLISHED
Explain CVE-2005-0676
index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via the search capability.
Affected Products: n/a
References: [{'name': '1013365', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013365'}]
CVE State: PUBLISHED
Explain CVE-2005-0677
index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter.
Affected Products: n/a
References: [{'name': '1013365', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013365'}]
CVE State: PUBLISHED
Explain CVE-2005-0678
PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the script_root to reference a URL on a remote web server that contains the code.
Affected Products: n/a
References: [{'name': '14505', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14505'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.stadtaus.com/forum/t-1579.html'}, {'name': '1013378', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013378'}, {'name': '20050304 PHP Form Mail Script (2.3) - Arbitrary File Inclusion (VXSfx)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110996489800035&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-0679
PHP remote file inclusion vulnerability in tell_a_friend.inc.php for Tell A Friend Script 2.7 before 20050305 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code.  NOTE: it was later reported that 2.4 is also affected.
Affected Products: n/a
References: [{'name': 'tellafriend-scriptroot-file-include(19630)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19630'}, {'name': '14628', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/14628'}, {'name': '20070727 Friend Script 2.5 - 2.4 Remote File &#304;nclude', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/474954/100/0/threaded'}, {'name': '1013390', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013390'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.stadtaus.com/forum/t-1579.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://arfis.wordpress.com/2007/09/13/rfi-02-openelibrary/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.stadtaus.com/forum/t-1578.html'}]
CVE State: PUBLISHED
Explain CVE-2005-0680
PHP remote file inclusion vulnerability in download_center_lite.inc.php for Download Center Lite 1.6 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.stadtaus.com/forum/t-1579.html'}, {'name': '14513', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14513'}, {'name': '20050304 Download Center Lite (DCL) - Arbitrary File Inclusion (VXSfx)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110996056601719&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.stadtaus.com/forum/p-5895.html'}]
CVE State: PUBLISHED
Explain CVE-2005-0681
Nokia Symbian 60 allows remote attackers to cause a denial of service (phone restart) via a Bluetooth nickname.
Affected Products: n/a
References: [{'name': 'nokia-symbian-dos(19594)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19594'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/securitynews/5PP0V00G1S.html'}, {'name': '1013380', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013380'}, {'name': '12743', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12743'}, {'name': '14574', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/14574'}]
CVE State: PUBLISHED
Explain CVE-2005-0682
Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs.
Affected Products: n/a
References: [{'name': '14515', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14515'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/files/drupal-4.5-xss-fix.patch'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/drupal-4.5.2'}]
CVE State: PUBLISHED
Explain CVE-2005-0684
Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long file parameter after a percent ("%") sign or (2) a long Lock-Token string to the WebDAV functionality, which is not properly handled by the getLockTokenHeader function in WDVHandler_CommonUtils.c.
Affected Products: n/a
References: [{'name': '20050425 MySQL MaxDB Webtool Remote Stack Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=234&type=vulnerabilities'}, {'name': '13368', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13368'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev.mysql.com/doc/maxdb/changes/changes_7.5.00.26.html#WebDAV'}, {'name': '20050425 MySQL MaxDB Webtool Remote Lock-Token Stack Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=235&type=vulnerabilities'}]
CVE State: PUBLISHED