Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2003-1205
Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service (crash) by renaming a file to the "con" MS-DOS device name.
Affected Products: n/a
References: [{'name': '2378', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2378'}, {'name': 'crob-rename-file-dos(12838)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12838'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.crob.net/studio/ftpserver/'}, {'name': '20030806 DoS Vulnerabilities in Crob FTP Server 2.60.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106019292611151&w=2'}, {'name': '9467', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/9467'}]
CVE State: PUBLISHED
Explain CVE-2003-1206
Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service (crash) via "%s" or "%n" sequences in (1) the username during login, or other FTP commands such as (2) dir.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.crob.net/studio/ftpserver/'}, {'name': '20030806 DoS Vulnerabilities in Crob FTP Server 2.60.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106019292611151&w=2'}, {'name': '8929', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8929'}, {'name': '20030807 Re: DoS Vulnerabilities in Crob FTP Server 2.60.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-08/0087.html'}, {'name': 'crob-login-dos(12834)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12834'}]
CVE State: PUBLISHED
Explain CVE-2003-1207
Crob FTP Server 3.5.1 allows remote authenticated users to cause a denial of service (crash) via a dir command with a large number of "." characters followed by a "/*" string.
Affected Products: n/a
References: [{'name': '10778', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10778'}, {'name': '1008908', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1008908'}, {'name': '20040201 Vulnerabilities in Crob FTP Server V3.5.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/352329'}, {'name': '9549', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9549'}, {'name': 'crob-dir-dos(15105)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15105'}]
CVE State: PUBLISHED
Explain CVE-2003-1208
Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session parameter to a long value, or providing long parameters to the (2) NUMTOYMINTERVAL, (3) NUMTODSINTERVAL or (4) FROM_TZ functions.
Affected Products: n/a
References: [{'name': 'oracle-multiple-function-bo(15060)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15060'}, {'name': 'VU#399806', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/399806'}, {'name': '3840', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3840'}, {'name': 'O-093', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-093.shtml'}, {'name': '10805', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10805'}, {'name': 'VU#819126', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/819126'}, {'name': '3838', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3838'}, {'name': 'VU#240174', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/240174'}, {'name': '20040205 Oracle Database 9ir2 Interval Conversion Functions Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0030.html'}, {'name': '9587', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9587'}, {'name': '3839', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3839'}, {'name': 'VU#846582', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/846582'}, {'name': '3837', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3837'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/ora_numtodsinterval.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/ora_from_tz.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/ora_numtoyminterval.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/ora_time_zone.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-1209
The Post_Method function in Monkey HTTP Daemon before 0.6.2 allows remote attackers to cause a denial of service (crash) via a POST request without a Content-Type header.
Affected Products: n/a
References: [{'name': '7201', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7201'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://monkeyd.sourceforge.net/Changelog.txt'}, {'name': 'monkey-content-type-dos(11650)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11650'}]
CVE State: PUBLISHED
Explain CVE-2003-1210
Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to the getit function or the (2) min parameter to the search function.
Affected Products: n/a
References: [{'name': 'phpnuke-multiple-sql-injection(11984)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11984'}, {'name': '7588', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7588'}, {'name': '20030513 More and More SQL injection on PHP-Nuke 6.5.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-05/0147.html'}]
CVE State: PUBLISHED
Explain CVE-2003-1211
Cross-site scripting (XSS) vulnerability in search.asp for MaxWebPortal 1.30 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the Search parameter.
Affected Products: n/a
References: [{'name': '7837', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7837'}, {'name': 'maxwebportal-search-xss(12277)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12277'}, {'name': '8979', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8979'}, {'name': '20030606 Critical Vulnerabilities In Max Web Portal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-06/0048.html'}, {'name': '3281', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3281'}]
CVE State: PUBLISHED
Explain CVE-2003-1212
MaxWebPortal 1.30 allows remote attackers to perform unauthorized actions by modifying hidden form fields, such as the (1) news, (2) lock, or (3) allmem fields in the 'start new topic' HTML page.
Affected Products: n/a
References: [{'name': 'maxwebportal-form-field-modify(12278)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12278'}, {'name': '7837', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7837'}, {'name': '4933', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4933'}, {'name': '8979', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8979'}, {'name': '20030606 Critical Vulnerabilities In Max Web Portal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-06/0048.html'}]
CVE State: PUBLISHED
Explain CVE-2003-1213
The default installation of MaxWebPortal 1.30 stores the portal database under the web document root with insecure access control, which allows remote attackers to obtain sensitive information via a direct request to database/db2000.mdb.
Affected Products: n/a
References: [{'name': '7837', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7837'}, {'name': '8979', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8979'}, {'name': '20030606 Critical Vulnerabilities In Max Web Portal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-06/0048.html'}, {'name': 'maxwebportal-database-access(12279)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12279'}]
CVE State: PUBLISHED
Explain CVE-2003-1214
Unknown vulnerability in the server login for VisualShapers ezContents 2.02 and earlier allows remote attackers to bypass access restrictions and gain access to restricted functions.
Affected Products: n/a
References: [{'name': '10839', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10839'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ezcontents.org/forum/viewtopic.php?t=361'}, {'name': 'ezcontents-login-bypass(15136)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15136'}]
CVE State: PUBLISHED
Explain CVE-2003-1215
SQL injection vulnerability in groupcp.php for phpBB 2.0.6 and earlier allows group moderators to perform unauthorized activities via the sql_in parameter.
Affected Products: n/a
References: [{'name': "20031229 SQL Injection in phpBB's groupcp.php", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107273069130885&w=2'}, {'name': '9314', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9314'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=161943'}, {'name': 'phpbb-groupcp-sql-injection(14096)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14096'}]
CVE State: PUBLISHED
Explain CVE-2003-1216
SQL injection vulnerability in search.php for phpBB 2.0.6 and earlier allows remote attackers to execute arbitrary SQL and gain privileges via the search_id parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.phpbb.com/phpBB/viewtopic.php?t=153818'}, {'name': 'phpbb-searchphp-sql-injection(13867)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13867'}, {'name': '20031220 phpBB v2.06 search_id sql injection exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107196735102970&w=2'}, {'name': '9122', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9122'}, {'name': '20031128 [Hat-Squad] phpBB search_id injection exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107005608726609&w=2'}, {'name': '20031127 phpBB 2.06 search.php SQL injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106997132425576&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-1219
Cross-site scripting (XSS) vulnerability in the tep_href_link function in html_output.php for osCommerce before 2.2-MS3 allows remote attackers to inject arbitrary web script or HTML via the osCsid parameter.
Affected Products: n/a
References: [{'name': '[tep-commits] 20031217 [TEP-COMMIT] CVS: catalog/catalog/includes/functions html_output.php,1.58,1.59', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://osdir.com/ml/web.oscommerce.cvs/2003-12/msg00024.html'}, {'name': '9238', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9238'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oscommerce.com/community/bugs%2C1546'}, {'name': '20031217 osCommerce Malformed Session ID XSS Vuln', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/347831'}]
CVE State: PUBLISHED
Explain CVE-2003-1220
BEA WebLogic Server proxy plugin for BEA Weblogic Express and Server 6.1 through 8.1 SP 1 allows remote attackers to cause a denial of service (proxy plugin crash) via a malformed URL.
Affected Products: n/a
References: [{'name': '9034', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9034'}, {'name': 'BEA03-39.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/25'}]
CVE State: PUBLISHED
Explain CVE-2003-1221
BEA WebLogic Express and Server 7.0 through 8.1 SP 1, under certain circumstances when a request to use T3 over SSL (t3s) is made to the insecure T3 port, may use a non-SSL connection for the communication, which could allow attackers to sniff sessions.
Affected Products: n/a
References: [{'name': '9034', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9034'}, {'name': 'BEA03-40.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/32'}]
CVE State: PUBLISHED
Explain CVE-2003-1222
BEA Weblogic Express and Server 8.0 through 8.1 SP 1, when using a foreign Java Message Service (JMS) provider, echoes the password for the foreign provider to the console and stores it in cleartext in config.xml, which could allow attackers to obtain the password.
Affected Products: n/a
References: [{'name': '9034', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9034'}, {'name': 'BEA03-41.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/63'}]
CVE State: PUBLISHED
Explain CVE-2003-1223
The Node Manager for BEA WebLogic Express and Server 6.1 through 8.1 SP 1 allows remote attackers to cause a denial of service (Node Manager crash) via malformed data to the Node Manager's port, as demonstrated by nmap.
Affected Products: n/a
References: [{'name': '9034', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9034'}, {'name': 'BEA03-42.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/48'}]
CVE State: PUBLISHED
Explain CVE-2003-1224
Weblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the JDBCConnectionPoolRuntimeMBean password to the screen in cleartext, which allows attackers to read a user's password by physically observing ("shoulder surfing") the screen.
Affected Products: n/a
References: [{'name': '7563', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7563'}, {'name': 'BEA03-30.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/22'}]
CVE State: PUBLISHED
Explain CVE-2003-1225
The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords.
Affected Products: n/a
References: [{'name': '7563', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7563'}, {'name': 'BEA03-30.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/22'}]
CVE State: PUBLISHED
Explain CVE-2003-1226
BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores certain secrets concerning password encryption insecurely in config.xml, filerealm.properties, and weblogic-rar.xml, which allows local users to learn those secrets and decrypt passwords.
Affected Products: n/a
References: [{'name': '7563', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7563'}, {'name': '7587', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7587'}, {'name': 'BEA03-30.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/22'}]
CVE State: PUBLISHED
Explain CVE-2003-1227
PHP remote file include vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configuration mode on Unix, allows remote attackers to inject arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412.  NOTE: this issue might be exploitable only during installation, or if the administrator has not run a security script after installation.
Affected Products: n/a
References: [{'name': 'gallery-indexphp-file-include(13419)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13419'}, {'name': '8814', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8814'}, {'name': '20031012 Re: Gallery 1.4 including file vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/341098'}, {'name': '20031011 RE: Gallery 1.4 including file vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/341094'}, {'name': '20031011 Gallery 1.4 including file vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/341044'}]
CVE State: PUBLISHED
Explain CVE-2003-1228
Buffer overflow in the prepare_reply function in request.c for Mathopd 1.2 through 1.5b13, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via an HTTP request with a long path.
Affected Products: n/a
References: [{'name': '20031208 Re: [Fwd: Security Alert; possible buffer overflow in all Mathopd', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107090601705839&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/unixfocus/5FP0C1FCAW.html'}, {'name': '10385', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10385/'}, {'name': '20031205 [Fwd: Security Alert; possible buffer overflow in all Mathopd versions]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107064887507504&w=2'}, {'name': '9871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9871'}, {'name': 'mathopd-preparereply-bo(15474)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15474'}]
CVE State: PUBLISHED
Explain CVE-2003-1229
X509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01, (2) JSSE before 1.0.3, (3) Java Plug-in SDK and JRE 1.3.0 through 1.4.1, and (4) Java Web Start 1.0 through 1.2 incorrectly calls the isClientTrusted method when determining server trust, which results in improper validation of digital certificate and allows remote attackers to (1) falsely authenticate peers for SSL or (2) incorrectly validate signed JAR files.
Affected Products: n/a
References: [{'name': '1006001', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1006001'}, {'name': '1007483', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1007483'}, {'name': '1006007', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1006007'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://java.sun.com/products/jsse/CHANGES.txt'}, {'name': 'HPSBUX0301-239', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0301-239'}, {'name': 'sun-java-improper-validation(11182)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11182'}, {'name': '7943', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7943'}, {'name': '6682', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6682'}, {'name': 'oval:org.mitre.oval:def:5883', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5883'}, {'name': '50081', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-50081-1'}, {'name': '20030128 Incorrect Certificate Validation in Java Secure Socket Extension', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-01/0334.html'}]
CVE State: PUBLISHED
Explain CVE-2003-1230
The implementation of SYN cookies (syncookies) in FreeBSD 4.5 through 5.0-RELEASE-p3 uses only 32-bit internal keys when generating syncookies, which makes it easier for remote attackers to conduct brute force ISN guessing attacks and spoof legitimate traffic.
Affected Products: n/a
References: [{'name': '19785', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/19785'}, {'name': 'freebsd-syncookie-brute-force(11397)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11397'}, {'name': '6920', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6920'}, {'name': '8142', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8142/'}, {'name': 'FreeBSD-SA-03:03', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://www.securityfocus.com/advisories/5013'}]
CVE State: PUBLISHED
Explain CVE-2003-1231
Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 5.5 allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
Affected Products: n/a
References: [{'name': '1008522', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1008522'}, {'name': '10458', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10458'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/unixfocus/6D00F2A95C.html'}, {'name': '9244', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9244'}, {'name': 'ecwshop-cat-xss(14032)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14032'}]
CVE State: PUBLISHED
Explain CVE-2003-1232
Emacs 21.2.1 does not prompt or warn the user before executing Lisp code in the local variables section of a text file, which allows user-assisted attackers to execute arbitrary commands, as demonstrated using the mode-name variable.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://groups.google.com/group/gnu.emacs.bug/browse_frm/thread/9424ec1b2fdae321/c691a2da8904db0f?hl=en&lr=&ie=UTF-8&oe=UTF-8&rnum=1&prev=/groups%3Fq%3Dguninski%2Bemacs%26hl%3Den%26lr%3D%26ie%3DUTF-8%26oe%3DUTF-8%26selm%3Dmailman.763.1041357806.19936.bug-gnu-emacs%2540gnu.org%26rnum%3D1#c691a2da8904db0f'}, {'name': '15375', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/15375'}, {'name': 'MDKSA-2005:208', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:208'}, {'name': '17496', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17496'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286183'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-May/005089.html'}]
CVE State: PUBLISHED
Explain CVE-2003-1233
Pedestal Software Integrity Protection Driver (IPD) 1.3 and earlier allows privileged attackers, such as rootkits, to bypass file access restrictions to the Windows kernel by using the NtCreateSymbolicLinkObject function to create a symbolic link to (1) \Device\PhysicalMemory or (2) to a drive letter using the subst command.
Affected Products: n/a
References: [{'name': '20030103 Pedestal Software Security Notice', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-01/0017.html'}, {'name': "20030103 Another way to bypass Integrity Protection Driver ('subst' vuln)", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-01/0018.html'}, {'name': '6511', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6511'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.phrack.org/show.php?p=59&a=16'}, {'name': 'ipd-ntcreatesymboliclinkobject-subs-symlink(10979)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10979'}, {'name': '7816', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7816'}]
CVE State: PUBLISHED
Explain CVE-2003-1234
Integer overflow in the f_count counter in FreeBSD before 4.2 through 5.0 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via multiple calls to (1) fpathconf and (2) lseek, which do not properly decrement f_count through a call to fdrop.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.pine.nl/press/pine-cert-20030101.txt'}, {'name': '20030106 PDS: Integer overflow in FreeBSD kernel', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/305308/30/26420/threaded'}, {'name': '20030106 PDS: Integer overflow in FreeBSD kernel', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0006.html'}, {'name': 'FreeBSD-SA-02:44', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:44.filedesc.asc'}, {'name': '20030107 FreeBSD Security Advisory FreeBSD-SA-02:44.filedesc', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-01/0057.html'}, {'name': '6524', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6524'}, {'name': '1005898', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1005898'}, {'name': 'freebsd-kernel-integer-overflow(10993)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10993.php'}, {'name': '7821', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7821'}]
CVE State: PUBLISHED
Explain CVE-2003-1235
BRW WebWeaver 1.03 allows remote attackers to obtain sensitive server environment information via a URL request for testcgi.exe, which lists the values of environment variables and the current working directory.
Affected Products: n/a
References: [{'name': '20030331 BRS WebWeaver: full disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-04/0014.html'}, {'name': '7283', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7283'}, {'name': 'webweaver-testcgi-info-disclosure(11686)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11686.php'}]
CVE State: PUBLISHED
Explain CVE-2003-1236
Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allows remote attackers to execute arbitrary code via format string specifiers in syslog.
Affected Products: n/a
References: [{'name': '6553', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6553'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://tanne.fluxnetz.de/download/tanne-0.7.1.tar.bz2'}, {'name': 'tanne-logger-format-string(11006)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11006.php'}, {'name': '20030107 [INetCop Security Advisory] Remote format string vulnerability in Tanne.', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0011.html'}, {'name': '20030108 Tanne Remote format string exploit (Proof of Concept)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/305663'}, {'name': '1005900', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1005900'}, {'name': '7831', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7831'}, {'name': '20030107 [INetCop Security Advisory] Remote format string vulnerability in    Tanne.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/305460'}]
CVE State: PUBLISHED
Explain CVE-2003-1237
Cross-site scripting vulnerability (XSS) in WWWBoard 2.0A2.1 and earlier allows remote attackers to inject arbitrary HTML or web script via a message post.
Affected Products: n/a
References: [{'name': '20030222 [SCSA-007] Cross Site Scripting Vulnerabilities in WWWBoard', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0274.html'}, {'name': 'wwwboard-message-xss(11383)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11383.php'}, {'name': '6918', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6918'}]
CVE State: PUBLISHED
Explain CVE-2003-1238
Cross-site scripting vulnerability (XSS) in Nuked-Klan 1.3 beta and earlier allows remote attackers to steal authentication information via cookies by injecting arbitrary HTML or script into op of the (1) Team, (2) News, and (3) Liens modules.
Affected Products: n/a
References: [{'name': 'nuked-klan-team-xss(11420)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11420.php'}, {'name': '20030318 Some XSS vulns', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-03/0275.html'}, {'name': '20030221 [SCSA-006] XSS & Function Execution Vulnerabilities in Nuked-Klan', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html'}, {'name': '6916', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6916'}]
CVE State: PUBLISHED
Explain CVE-2003-1239
Directory traversal vulnerability in sendphoto.php in WihPhoto 0.86 allows remote attackers to read arbitrary files via .. specifiers in the album parameter, and the target filename in the pic parameter.
Affected Products: n/a
References: [{'name': '20030223 WihPhoto (PHP)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0092.html'}, {'name': 'wihphoto-sendphoto-file-disclosure(11429)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11429.php'}, {'name': '6929', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6929'}, {'name': '20030223 WihPhoto (PHP)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/312966'}]
CVE State: PUBLISHED
Explain CVE-2003-1240
PHP remote file inclusion vulnerability in CuteNews 0.88 allows remote attackers to execute arbitrary PHP code via a URL in the cutepath parameter in (1) shownews.php, (2) search.php, or (3) comments.php.
Affected Products: n/a
References: [{'name': 'cutenews-php-file-include(11417)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11417.php'}, {'name': '20030225 PHP code injection in CuteNews', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0320.html'}, {'name': '6935', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6935'}]
CVE State: PUBLISHED
Explain CVE-2003-1241
Cross-site scripting vulnerability (XSS) in (1) admin_index.php, (2) admin_pass.php, (3) admin_modif.php, and (4) admin_suppr.php in MyGuestbook 3.0 allows remote attackers to execute arbitrary PHP code by modifying the location parameter to reference a URL on a remote web server that contains file.php via script injected into the pseudo, email, and message parameters.
Affected Products: n/a
References: [{'name': '20030221 Myguestbook (PHP)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/312762'}, {'name': '6906', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6906'}, {'name': '20030221 Myguestbook (PHP)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0089.html'}]
CVE State: PUBLISHED
Explain CVE-2003-1242
Sage 1.0 b3 allows remote attackers to obtain the root web server path via a URL request for a non-existent module, which returns the path in an error message.
Affected Products: n/a
References: [{'name': 'sage-module-path-disclosure(11372)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11372.php'}, {'name': '20030219 XSS and Path Disclosure in Sage', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0236.html'}, {'name': '6893', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6893'}]
CVE State: PUBLISHED
Explain CVE-2003-1243
Cross-site scripting vulnerability (XSS) in Sage 1.0 b3 allows remote attackers to insert arbitrary HTML or web script via the mod parameter.
Affected Products: n/a
References: [{'name': '20030219 XSS and Path Disclosure in Sage', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0236.html'}, {'name': '6894', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6894'}, {'name': 'sage-mod-xss(11371)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11371'}]
CVE State: PUBLISHED
Explain CVE-2003-1244
SQL injection vulnerability in page_header.php in phpBB 2.0, 2.0.1 and 2.0.2 allows remote attackers to brute force user passwords and possibly gain unauthorized access to forums via the forum_id parameter to index.php.
Affected Products: n/a
References: [{'name': '6888', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6888'}, {'name': '20030220 phpBB Security Bugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0245.html'}, {'name': 'phpbb-pageheader-sql-injection(11376)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11376.php'}]
CVE State: PUBLISHED
Explain CVE-2003-1245
index2.php in Mambo 4.0.12 allows remote attackers to gain administrator access via a URL request where session_id is set to the MD5 hash of a session cookie.
Affected Products: n/a
References: [{'name': 'mambo-sessionid-gain-privileges(11398)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11398'}, {'name': '20030224 Mambo SiteServer exploit gains administrative privileges', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0302.html'}, {'name': '6926', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6926'}]
CVE State: PUBLISHED
Explain CVE-2003-1246
NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protection Driver (IPD) 1.2 and 1.3 allows local users to create and overwrite arbitrary files via a symlink attack on \winnt\system32\drivers using the subst command.
Affected Products: n/a
References: [{'name': 'ipd-ntcreatesymboliclinkobject-subs-symlink(10979)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10979.php'}, {'name': '20030103 Pedestal Software Security Notice', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-01/0017.html'}, {'name': "20030103 Another way to bypass Integrity Protection Driver ('subst' vuln)", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-01/0018.html'}, {'name': '6511', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6511'}]
CVE State: PUBLISHED
Explain CVE-2003-1247
Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL content type in CGI::readFile, (2) a long path in diskusage, and (3) a long fname in flist.
Affected Products: n/a
References: [{'name': '1005893', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1005893'}, {'name': '6537', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6537'}, {'name': '7832', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7832'}, {'tags': ['x_refsource_MISC'], 'url': 'http://psoft.net/misc/webshell_patch.html'}, {'name': '6540', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6540'}, {'name': 'hsphere-webshell-readfile-bo(10999)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10999.php'}, {'name': '20030106 Remote root vuln in HSphere WebShell', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/305313'}, {'name': '6527', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6527'}, {'name': 'hsphere-webshell-flist-bo(11003)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11003.php'}, {'name': 'hsphere-webshell-diskusage-bo(11002)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11002.php'}, {'name': '6538', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6538'}]
CVE State: PUBLISHED
Explain CVE-2003-1248
H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) mode and (2) zipfile parameters in a URL request.
Affected Products: n/a
References: [{'name': '1005893', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1005893'}, {'name': '6539', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6539'}, {'name': '6537', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6537'}, {'tags': ['x_refsource_MISC'], 'url': 'http://psoft.net/misc/webshell_patch.html'}, {'name': 'hsphere-webshell-encodefilename-execution(11001)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11001.php'}, {'name': '20030106 Remote root vuln in HSphere WebShell', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/305313'}]
CVE State: PUBLISHED
Explain CVE-2003-1249
WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions.
Affected Products: n/a
References: [{'name': '7846', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7846'}, {'name': 'webintelligence-session-hijacking(11026)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11026.php'}, {'name': '1005906', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1005906'}, {'name': '6569', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6569'}, {'name': '20030109 WebIntelligence session hijacking vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0014.html'}, {'name': '20030109 WebIntelligence session hijacking vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/305991'}]
CVE State: PUBLISHED
Explain CVE-2003-1250
Efficient Networks 5861 DSL router, when running firmware 5.3.80 configured to block incoming TCP SYN, packets allows remote attackers to cause a denial of service (crash) via a flood of TCP SYN packets to the WAN interface using a port scanner such as nmap.
Affected Products: n/a
References: [{'name': '20030123 5861 IP Filtering issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/308008'}, {'name': '20030110 Efficient Networks 5861 DSL Router', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0015.html'}, {'name': '6573', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6573'}, {'name': '1005910', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1005910'}, {'name': 'efficient-dsl-portscan-dos(11032)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11032.php'}, {'name': '1005980', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005980'}, {'name': '20030110 Efficient Networks 5861 DSL Router', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/306081'}]
CVE State: PUBLISHED
Explain CVE-2003-1251
The (1) menu.inc.php, (2) datasets.php and (3) mass_operations.inc.php (mistakenly referred to as mass_opeations.inc.php) scripts in N/X 2002 allow remote attackers to execute arbitrary PHP code via a c_path that references a URL on a remote web server that contains the code.
Affected Products: n/a
References: [{'name': 'nx-file-include(10969)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10969.php'}, {'name': '20030102 N/X (PHP)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-01/0005.html'}, {'name': '6500', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6500'}, {'name': '7808', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7808'}]
CVE State: PUBLISHED
Explain CVE-2003-1252
register.php in S8Forum 3.0 allows remote attackers to execute arbitrary PHP commands by creating a user whose name ends in a .php extension and entering the desired commands into the E-mail field, which creates a web-accessible .php file that can be called by the attacker, as demonstrated using a "system($cmd)" E-mail address with a "any_name.php" username.
Affected Products: n/a
References: [{'name': '7819', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7819'}, {'name': '1005881', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1005881'}, {'name': '6547', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6547'}, {'name': '20030105 A security vulnerability in S8Forum', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/305406'}, {'name': 's8forum-register-command-execution(10974)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10974.php'}, {'name': '20030105 A security vulnerability in S8Forum', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0004.html'}]
CVE State: PUBLISHED
Explain CVE-2003-1253
PHP remote file inclusion vulnerability in Bookmark4U 1.8.3 allows remote attackers to execute arbitrary PHP code viaa URL in the prefix parameter to (1) dbase.php, (2) config.php, or (3) common.load.php.
Affected Products: n/a
References: [{'name': 'bookmark4u-file-include(11009)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11009.php'}, {'name': '20030106 Bookmar4U and Active PHP Bookmarks Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-01/0049.html'}]
CVE State: PUBLISHED
Explain CVE-2003-1254
Active PHP Bookmarks (APB) 1.1.01 allows remote attackers to execute arbitrary PHP code via (1) head.php, (2) apb_common.php, or (3) apb_view_class.php by modifying the APB_SETTINGS parameter to reference a URL on a remote web server that contains the code.
Affected Products: n/a
References: [{'name': '20030106 Bookmar4U and Active PHP Bookmarks Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-01/0049.html'}, {'name': '6545', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6545'}, {'name': 'apb-apbsettings-file-include(11010)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11010.php'}]
CVE State: PUBLISHED
Explain CVE-2003-1255
add_bookmark.php in Active PHP Bookmarks (APB) 1.1.01 allows remote attackers to add arbitrary bookmarks as other users using a modified auth_user_id parameter.
Affected Products: n/a
References: [{'name': 'apb-addbookmark-authentication-bypass(11011)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11011'}, {'name': '20030106 Bookmar4U and Active PHP Bookmarks Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-01/0049.html'}, {'name': '6546', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6546'}]
CVE State: PUBLISHED
Explain CVE-2003-1256
aff_liste_langue.php in E-theni allows remote attackers to execute arbitrary PHP code by modifying the rep_include parameter to reference a URL on a remote web server that contains para_langue.php.
Affected Products: n/a
References: [{'name': 'etheni-afflistelangue-file-include(11013)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11013.php'}, {'name': '6970', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6970'}, {'name': '20030106 E-theni (PHP)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/305381'}, {'name': '20030106 E-theni (PHP)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0009.html'}]
CVE State: PUBLISHED
Explain CVE-2003-1257
find_theni_home.php in E-theni allows remote attackers to obtain sensitive system information via a URL request which executes phpinfo.
Affected Products: n/a
References: [{'name': 'etheni-findthenihome-information-disclosure(11012)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11012.php'}, {'name': '20030106 E-theni (PHP)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/305381'}, {'name': '20030106 E-theni (PHP)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0009.html'}]
CVE State: PUBLISHED
Explain CVE-2003-1258
activate.php in versatileBulletinBoard (vBB) 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid.
Affected Products: n/a
References: [{'name': 'vbb-unauthorized-privileges(11044)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11044.php'}, {'name': '20030110 vulnerability in versatile BulletinBoard  Allows Gaining Administrative Privileges.', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0017.html'}]
CVE State: PUBLISHED