DuyTa/cve-kgrag-db huggingface dataset:
CVE-2005-2550
Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: evolution
References: http://marc.info/?l=full-disclosure&m=112368237712032&w=2, http://secunia.com/advisories/16394, http://secunia.com/advisories/19380
CVE-2005-2272
Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: safari
References: http://docs.info.apple.com/article.html?artnum=302847, http://secunia.com/advisories/15474, http://secunia.com/advisories/17813
CVE-2005-3488
Scorched 3D 39.1 (bf) and earlier allows remote attackers to cause a denial of service (long loop and server hang) via a negative numplayers value that bypasses a signed check in ServerConnectHandler.cpp.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: scorched_3d
References: http://aluigi.altervista.org/adv/scorchbugs-adv.txt, http://marc.info/?l=full-disclosure&m=113095941031946&w=2, http://secunia.com/advisories/17423
CVE-2005-2086
PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpbb
References: http://marc.info/?l=bugtraq&m=111999905917019&w=2, http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=302011, http://marc.info/?l=bugtraq&m=111999905917019&w=2
CVE-2005-2867
SQL injection vulnerability in BlueWhaleCRM allows remote attackers to execute arbitrary SQL commands via the Account ID field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bluewhalecrm
References: http://secunia.com/advisories/16615, http://www.securityfocus.com/bid/14697, http://secunia.com/advisories/16615
CVE-2005-4080
Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via UTF16 encoded attachments and strings that will be executed when viewed using Internet Explorer, which ignores the characters.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: imp
References: http://secunia.com/advisories/17910, http://securityreason.com/securityalert/232, http://securitytracker.com/id?1015315
CVE-2005-0483
Multiple directory traversal vulnerabilities in sitenfo.sh, sitezipchk.sh, and siteziplist.sh in Glftpd 1.26 to 2.00 allow remote authenticated users to (1) determine the existence of arbitrary files, (2) list files in restricted directories, or (3) read arbitrary files from within ZIP or gzip files, via .. (dot dot) sequences and globbing ("*") characters in a SITE NFO command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: glftpd
References: http://www.securityfocus.com/archive/1/390924, http://www.securityfocus.com/bid/12586, https://exchange.xforce.ibmcloud.com/vulnerabilities/19401
CVE-2005-1831
Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue, stating "Sudo catches SIGINT and returns an empty string for the password so I don't see how this could happen unless the user's actual password was empty.
CVSS v3.1 Score: 8.4 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sudo
References: http://archives.neohapsis.com/archives/bugtraq/2005-05/0349.html, http://archives.neohapsis.com/archives/bugtraq/2005-05/0359.html, http://marc.info/?l=bugtraq&m=111755694008928&w=2
CVE-2005-2968
Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mozilla, firefox
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt, http://secunia.com/advisories/16869, http://secunia.com/advisories/17042
CVE-2005-1470
Multiple unknown vulnerabilities in the (1) TZSP, (2) MGCP, (3) ISUP, (4) SMB, or (5) Bittorrent dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (segmentation fault) via unknown vectors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ethereal
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963, http://www.ethereal.com/appnotes/enpa-sa-00019.html, http://www.ethereal.com/news/item_20050504_01.html
CVE-2005-4871
Certain XML functions in IBM DB2 8.1 run with the privileges of DB2 instead of the logged-in user, which allows remote attackers to create or overwrite files via (1) XMLFileFromVarchar or (2) XMLFileFromClob, or read files via (3) XMLVarcharFromFile or (4) XMLClobFromFile.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: db2
Related CWEs: CWE-264
References: http://marc.info/?l=bugtraq&m=110495620513954&w=2, http://secunia.com/advisories/12733/, http://www.ngssoftware.com/advisories/db205012005I.txt
CWE: CWE-264
CVE-2005-2305
DG Remote Control Server 1.6.2 allows remote attackers to cause a denial of service (crash or CPU consumption) and possibly execute arbitrary code via a long message to TCP port 1071 or 1073, possibly due to a buffer overflow.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: remote_control_server
References: http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=72, http://secunia.com/advisories/16070, http://www.securityfocus.com/bid/14263
CVE-2005-2070
The ClamAV Mail fILTER (clamav-milter) 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a denial of service by keeping an open connection, which prevents ClamAV from reloading.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sendmail
References: http://seclists.org/lists/bugtraq/2005/Jun/0197.html, http://www.debian.org/security/2005/dsa-737, http://www.novell.com/linux/security/advisories/2005_38_clamav.html
CVE-2005-2349
Zoo 2.10 has Directory traversal
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: zoo
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://www.openwall.com/lists/oss-security/2015/01/03/1, https://security-tracker.debian.org/tracker/CVE-2005-2349, http://www.openwall.com/lists/oss-security/2015/01/03/1
CWE: CWE-22
CVE-2005-0318
useredit_account.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the logged in user, which allows remote authenticated users to edit other users' account information via a modified user parameter.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: webadmin
References: http://marc.info/?l=bugtraq&m=110692897003614&w=2, http://securitytracker.com/id?1013038, http://www.securityfocus.com/bid/12395
CVE-2005-3453
Multiple unspecified vulnerabilities in Web Cache in Oracle Application Server 1.0 up to 10.1.2.0 has unknown impact and attack vectors, as identified by Oracle Vuln# (1) AS12 and (2) AS14.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: application_server
References: http://secunia.com/advisories/17250, http://www.kb.cert.org/vuls/id/210524, http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE-2005-2534
Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote attackers to cause a denial of service (server crash) via simultaneous TCP connections from multiple clients that use the same client certificate.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: openvpn
References: http://openvpn.net/changelog.html, http://secunia.com/advisories/16463, http://secunia.com/advisories/17103
CVE-2005-1303
The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: citat.pl
References: http://marc.info/?l=bugtraq&m=111445477910178&w=2, http://marc.info/?l=bugtraq&m=111445477910178&w=2
CVE-2005-0867
Integer overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to a sysfs file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel
References: http://www.novell.com/linux/security/advisories/2005_18_kernel.html, http://www.redhat.com/support/errata/RHSA-2005-366.html, http://www.securityfocus.com/archive/1/427980/100/0/threaded
CVE-2005-3386
SQL injection vulnerability in Techno Dreams Web Directory script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: web_directory
References: http://marc.info/?l=bugtraq&m=113035773010381&w=2, http://secunia.com/advisories/17354/, http://securityreason.com/securityalert/120
CVE-2005-3904
Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jre, jdk
References: http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html, http://secunia.com/advisories/17748, http://secunia.com/advisories/17847
CVE-2005-2368
vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: vim
Related CWEs: CWE-78
Related CAPECs: CAPEC-43, CAPEC-6, CAPEC-88
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/035402.html, http://www.guninski.com/where_do_you_want_billg_to_go_today_5.html, http://www.redhat.com/support/errata/RHSA-2005-745.html
CWE: CWE-78
CVE-2005-1619
Multiple cross-site scripting (XSS) vulnerabilities in (1) start_page.css.php3 (aka start-page.css.php3) or (2) style.css.php3 in PHPMyChat 0.14.5 allow remote attackers to inject arbitrary web script or HTML commands via the FontName parameter.  NOTE: it was later reported that 0.14.5 is also affected.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpmychat
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://marc.info/?l=bugtraq&m=111602076500031&w=2, http://www.securityfocus.com/archive/1/484575/100/0/threaded, http://www.securityfocus.com/bid/13627
CWE: CWE-79
CVE-2005-1083
index.php in aeDating 3.2 allows remote attackers to include arbitrary files via the skin parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: aedating
References: http://secunia.com/advisories/14913, http://secunia.com/advisories/14913
CVE-2005-0909
PHP remote file inclusion vulnerability in shoutact.php for TKai's Shoutbox allows remote attackers to execute arbitrary PHP code via the query parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tkais_shoutbox
References: http://marc.info/?l=full-disclosure&m=111202260908735&w=2, http://seclists.org/lists/fulldisclosure/2005/Mar/0900.html, http://www.securityfocus.com/bid/12914
CVE-2005-3521
SQL injection vulnerability in resetcore.php in e107 0.617 through 0.6173 allows remote attackers to execute arbitrary SQL commands, bypass authentication, and inject HTML or script via the (1) a_name parameter or (2) user field of the login page.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: e107
References: http://e107.org/news.php, http://marc.info/?l=bugtraq&m=112967223222966&w=2, http://secunia.com/advisories/17237/
CVE-2005-0185
Stack-based buffer overflow in NodeManager Professional 2.00 allows remote attackers to execute arbitrary commands via a LinkDown-Trap packet that contains a long OCTET-STRING in the Trap variable-bindings field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: nodemanager_professional
References: http://marc.info/?l=bugtraq&m=110599796118583&w=2, http://secunia.com/advisories/13881/, http://securitytracker.com/id?1012915
CVE-2005-1869
PHP remote file inclusion vulnerability in start_lobby.php in MWChat 6.x allows remote attackers to execute arbitrary PHP code via the CONFIG[MWCHAT_Libs] parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mwchat
References: http://secunia.com/advisories/15596, http://www.appindex.net, http://www.defacers.com.mx/advisories/4.txt
CVE-2005-4372
Cross-site scripting (XSS) vulnerability in account.html in Adaptive Website Framework (AWF) 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: adaptive_website_framework
References: http://pridels0.blogspot.com/2005/12/awf-adaptive-website-framework-vuln.html, http://www.awf-cms.org/news.html, http://www.osvdb.org/21914
CVE-2005-3434
Archilles Newsworld before 1.5.0-rc1 stores (1) account.nwd and (2) session.nwd under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames, hashed passwords, and session IDs, and gain privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: newsworld
References: http://marc.info/?l=bugtraq&m=113018731120709&w=2, http://secunia.com/advisories/17310/, https://exchange.xforce.ibmcloud.com/vulnerabilities/22859
CVE-2005-3105
The mprotect code (mprotect.c) in Linux 2.6 on Itanium IA64 Montecito processors does not properly maintain cache coherency as required by the architecture, which allows local users to cause a denial of service and possibly corrupt data by modifying PTE protections.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://cache-www.intel.com/cd/00/00/21/57/215792_215792.pdf, http://linux.bkbits.net:8080/linux-2.6/cset%404248d4019z8HvgrPAji51TKrWiV2uw?nav=index.html%7Csrc/%7Csrc/mm%7Crelated/mm/mprotect.c, http://secunia.com/advisories/18056
CVE-2005-4066
Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCX_FTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm.
CVSS v2.0 Score: 4.9 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:N/A:N
Affected Products: total_commander
Related CWEs: CWE-310
References: http://securitytracker.com/id?1015311, http://www.networksecurity.fi/advisories/total-commander.html, http://www.vupen.com/english/advisories/2005/2780
CWE: CWE-310
CVE-2005-1311
Cross-site scripting (XSS) vulnerability in Yappa-NG before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: yappa-ng
References: http://secunia.com/advisories/15107, http://sourceforge.net/project/shownotes.php?release_id=323206, http://www.osvdb.org/15828
CVE-2005-4800
Direct static code injection vulnerability in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allows remote authenticated administrators to inject arbitrary PHP code via the TestGallery parameter in a mod_info action to modify_gallery.php, which inserts the code into guid_info.php.  NOTE: this issue is easier to exploit due to a separate CSRF vulnerability.
CVSS v2.0 Score: 9.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Affected Products: yapig
References: http://archives.neohapsis.com/archives/bugtraq/2005-10/0161.html, http://secunia.com/advisories/17041, http://www.osvdb.org/19960
CVE-2005-4866
Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminator to be removed and leads to the overflow.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: db2_universal_database
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://marc.info/?l=bugtraq&m=110495251101381&w=2, http://secunia.com/advisories/12733/, http://www-1.ibm.com/support/docview.wss?uid=swg1IY61492
CWE: CWE-119
CVE-2005-0568
Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl_guid value, which results in an invalid pointer dereference.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: soldier_of_fortune_2
References: http://aluigi.altervista.org/adv/sof2guidboom-adv.txt, http://marc.info/?l=bugtraq&m=110927288423807&w=2, http://secunia.com/advisories/13289
CVE-2005-2849
Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions of source code via the -f option to Dig (dig_device.cgi), (2) determine file existence via the -r argument to Tcpdump (tcpdump_device.cgi) or (3) modify files in the cgi-bin directory via the -w argument to Tcpdump.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: barracuda_spam_firewall
References: http://marc.info/?l=bugtraq&m=112560044813390&w=2, http://secunia.com/advisories/16683/, http://securiweb.net/wiki/Ressources/AvisDeSecurite/2005.1
CVE-2005-0084
Buffer overflow in the X11 dissector in Ethereal 0.8.10 through 0.10.8 allows remote attackers to execute arbitrary code via a crafted packet.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ethereal
References: http://secunia.com/advisories/13946/, http://www.ciac.org/ciac/bulletins/p-106.shtml, http://www.debian.org/security/2005/dsa-653
CVE-2005-4212
Directory traversal vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary local files via ".." (dot dot) sequences in the $_CCFG[_PKG_PATH_DBSE] variable.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpcoin
References: http://forums.phpcoin.com/index.php?showtopic=5469, http://rgod.altervista.org/phpcoin122.html, http://secunia.com/advisories/18030
CVE-2005-2057
Multiple cross-site scripting (XSS) vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to inject arbitrary web script or HTML via the (1) Searchpage parameter to dosearch.php, (2) Number, (3) what, or (4) page parameter to newreply.php, (5) Number, (6) Board, or (7) what parameter to showprofile.php, (8) fpart or (9) page parameter to showflat.php, or (10) like parameter to showmembers.php.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: ubb.threads
References: http://marc.info/?l=bugtraq&m=111963737202040&w=2, http://www.gulftech.org/?node=research&article_id=00084-06232005, http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351
CVE-2005-2252
PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie to the user ID.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpauction
References: http://secunia.com/advisories/15967, http://securitytracker.com/id?1014423, http://secunia.com/advisories/15967
CVE-2005-2819
DownFile 1.3 allows remote attackers to gain administrator privileges via a direct request to (1) update.php, (2) del.php, and (3) add_form.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: downfile
Related CWEs: CWE-264
References: http://secunia.com/advisories/16630, http://securitytracker.com/id?1014827, http://www.securityfocus.com/bid/14714
CWE: CWE-264
CVE-2005-3843
SQL injection vulnerability in faq.php in Nicecoder iDesk 1.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: idesk
References: http://pridels0.blogspot.com/2005/11/idesk-catid-sql-inj.html, http://secunia.com/advisories/17729, http://www.osvdb.org/21117
CVE-2005-1674
Cross-Site Request Forgery (CSRF) vulnerability in Help Center Live allows remote attackers to perform actions as the administrator via a link or IMG tag to view.php.
CVSS v3.1 Score: 6.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: help_center_live
Related CWEs: CWE-352
Related CAPECs: CAPEC-467, CAPEC-111, CAPEC-462
References: http://www.gulftech.org/?node=research&article_id=00076-05172005, http://www.securityfocus.com/archive/1/398457/2005-05-15/2005-05-21/0, http://www.gulftech.org/?node=research&article_id=00076-05172005
CWE: CWE-352
CVE-2005-1676
Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allow remote attackers to inject arbitrary web script or HTML via the (1) picture columns embedded within SharePoint lists or (2) drop-down menus in a SharePoint list.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: virtual_office, groove_workspace
References: http://secunia.com/advisories/15421, http://www.kb.cert.org/vuls/id/372618, http://www.kb.cert.org/vuls/id/514386
CVE-2005-3935
SQL injection vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) node and (2) art_id parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: socketkb
References: http://pridels0.blogspot.com/2005/11/socketkb-11x-vuln.html, http://secunia.com/advisories/17807, http://www.securityfocus.com/bid/15650
CVE-2005-0644
Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4436 allows remote attackers to execute arbitrary code via a malformed LHA file with a type 2 header file name field, a variant of CVE-2005-0643.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: antivirus_engine
References: http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdf, http://secunia.com/advisories/14628, http://securitytracker.com/id?1013463
CVE-2005-1279
tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tcpdump
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.60/SCOSA-2005.60.txt, http://secunia.com/advisories/15125, http://secunia.com/advisories/17101
CVE-2005-3178
Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during (1) zoom, (2) reduce, or (3) rotate operations.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: xloadimage, xli
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.62/SCOSA-2005.62.txt, ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.56/SCOSA-2005.56.txt, http://marc.info/?l=bugtraq&m=112862493918840&w=2
CVE-2005-0330
Buffer overflow in Painkiller 1.35 and earlier, and possibly other versions before 1.61, allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a long cd-key hash.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: painkiller
References: http://aluigi.altervista.org/adv/painkkeybof-adv.txt, http://marc.info/?l=bugtraq&m=110736915015707&w=2, http://secunia.com/advisories/14113/
CVE-2005-2854
CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers to use the script as a mail relay (spam proxy) via CRLF sequences in the (1) name or (2) email fields, which are injected into mail headers.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: chfeedback.pl_feedback_form_perl_script
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0094.html, http://www.securityfocus.com/bid/14749, http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0094.html
CVE-2005-4646
Unspecified vulnerability in index.php in PEARLINGER Pearl Forums 2.4 allows remote attackers to include arbitrary files via the mode parameter, possibly due to a directory traversal vulnerability.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: pearl_forums
References: http://secunia.com/advisories/17533, http://www.osvdb.org/20849, http://www.securityfocus.com/bid/15433
CVE-2005-0741
Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a usersrecentposts action.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: yabb
References: http://securitytracker.com/id?1013420, http://www.securityfocus.com/bid/12756, http://securitytracker.com/id?1013420
CVE-2005-1345
Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: squid
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000948, http://fedoranews.org/updates/FEDORA--.shtml, http://www.debian.org/security/2005/dsa-721
CVE-2005-2259
The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including (1) USANet Shopping Mall Software, (2) Domain Name Auction Software, (3) Standard Classified Ads Software, and (4) MakeBid Reverse Auction allows remote attackers to execute arbitrary code via shell metacharacters in the DISPCLOSED parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: makebid_reverse_auction, usanet_shopping_mall, makebid_auction_standard, domain_name_auction, makebid_auction_deluxe
References: http://secunia.com/advisories/15985, http://securitytracker.com/id?1014411, http://www.securityfocus.com/bid/14179
CVE-2005-0374
Cross-site scripting (XSS) vulnerability in Bitboard 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via an [img] bbcode image tag with an event such as mouseover.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: bitboard
References: http://marc.info/?l=bugtraq&m=110555988111899&w=2, http://securitytracker.com/id?1012864, http://www.securityfocus.com/bid/12248
CVE-2005-2518
Buffer overflow in servermgrd in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html, http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html, http://securitytracker.com/id?1014709
CVE-2005-0922
Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (system hang or crash) by triggering a scan of a certain file type.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: norton_antivirus, norton_internet_security, norton_system_works
References: http://secunia.com/advisories/14741, http://securityresponse.symantec.com/avcenter/security/Content/2005.03.28.html, http://securitytracker.com/id?1013585
CVE-2005-4381
Multiple cross-site scripting (XSS) vulnerabilities in Caravel CMS 3.0 Beta 1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) fileDN and (2) folderviewer_attrs parameters.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: caravel_cms
References: http://pridels0.blogspot.com/2005/12/caravel-cms-xss.html, http://secunia.com/advisories/18151, http://www.osvdb.org/21833
CVE-2005-4483
Cross-site scripting (XSS) vulnerability in login.asp in SiteEnable 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the ret_page parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: siteenable
References: http://pridels0.blogspot.com/2005/12/siteenable-xss-vuln.html, http://secunia.com/advisories/18201, http://www.osvdb.org/21879
CVE-2005-4422
Unrestricted file upload vulnerability in toendaCMS before 0.6.2 Stable allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in data/images/albums.
CVSS v2.0 Score: 6.5 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Affected Products: toendacms
References: http://secunia.com/advisories/17471, http://www.securityfocus.com/archive/1/415975, http://www.securityfocus.com/bid/15351
CVE-2005-2189
Lantronix SecureLinx console server running firmware 2.0 and 3.0 stores /etc/ssh under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as SSH private keys.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: securelinx
References: http://marc.info/?l=bugtraq&m=112075990621765&w=2, http://secunia.com/advisories/15979, http://marc.info/?l=bugtraq&m=112075990621765&w=2
CVE-2005-1112
IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via an HTTP request with an invalid Host header, which causes the page to be processed by the web server instead of the JSP engine.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: websphere_application_server
References: http://marc.info/?l=bugtraq&m=111342594129109&w=2, http://secunia.com/advisories/14962, http://securitytracker.com/id?1013697
CVE-2005-1292
Multiple cross-site scripting (XSS) vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via the idProduct parameter to (1) tellAFriend.asp or (2) addToWishlist.asp, redirect parameter to (3) access.asp or (4) login.asp, message parameter to (5) login.asp or (6) error.asp, or (7) sku or (8) name parameter to searchResults.asp.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: cartwiz
References: http://marc.info/?l=bugtraq&m=111428393022389&w=2, http://secunia.com/advisories/15055, http://securitytracker.com/id?1013792
CVE-2005-2847
img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: barracuda_spam_firewall
References: http://marc.info/?l=bugtraq&m=112560044813390&w=2, http://secunia.com/advisories/16683/, http://www.securityfocus.com/bid/14712
CVE-2005-1025
The FTP server in AS/400 4.3, when running in IFS mode, allows remote attackers to obtain sensitive information via a symlink attack using RCMD and the ADDLNK utility, as demonstrated using the QSYS.LIB library.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: iseries_as_400
References: http://marc.info/?l=bugtraq&m=111264136829017&w=2, http://www.osvdb.org/15300, http://www.venera.com/downloads/AS400_user_accounts_ftp_disclosure.pdf
CVE-2005-1939
Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in a request to the Report service (TCP 8022).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: whatsup_small_business
References: http://cirt.dk/advisories/cirt-40-advisory.pdf, http://secunia.com/advisories/15500, http://secunia.com/secunia_research/2005-14/advisory/
CVE-2005-1134
SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) url_id or (2) entry_id parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: serendipity
References: http://seclists.org/lists/bugtraq/2005/Apr/0195.html, http://secunia.com/advisories/15145, http://securitytracker.com/id?1013699
CVE-2005-1835
NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to databases/Users.mdb.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: nextweb_\(i\)site
Related CWEs: CWE-552
Related CAPECs: CAPEC-150, CAPEC-639
MITRE ATT&CK Techniques: T1552.006, T1602, T1555
MITRE ATT&CK Tactics: T1552
References: http://marc.info/?l=bugtraq&m=111764682925083&w=2, http://secunia.com/advisories/15560, http://securitytracker.com/id?1014085
CWE: CWE-552
MITRE ATT&CK techniques: T1552.006, T1602, T1555, T1213, T1039, T1119, T1552.001, T1003, T1530, T1552.004, T1552.003
MITRE ATT&CK tactics: T1552
CVE-2005-4847
Unspecified vulnerability in Spey 0.3.3 has unknown impact and attack vectors related to "A number of security holes which could lead to compromise," a different issue than CVE-2005-4846.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: spey
References: http://sourceforge.net/forum/forum.php?forum_id=514029, http://www.osvdb.org/38887, http://sourceforge.net/forum/forum.php?forum_id=514029
CVE-2005-0694
Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obtain sensitive information via a direct request to HCDiskQuotaService.csv.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: hosting_controller
References: http://isun.shabgard.org/hc2.txt, http://marc.info/?l=bugtraq&m=111026083314947&w=2, http://secunia.com/advisories/14522
CVE-2005-4497
Cross-site scripting (XSS) vulnerability in Tangora Portal CMS 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter in a search page, as demonstrated using (1) page1631.aspx and (2) page496.aspx.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: tangora_portal_cms
References: http://pridels0.blogspot.com/2005/12/tangora-portal-cms-xss-vuln.html, http://secunia.com/advisories/18206, http://www.osvdb.org/21860
CVE-2005-0444
VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writable temporary directory, which allows local users to execute arbitrary code.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: workstation
References: http://security.gentoo.org/glsa/glsa-200502-18.xml, http://security.gentoo.org/glsa/glsa-200502-18.xml
CVE-2005-4479
SQL injection vulnerability in article.php in phpSlash 0.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the story_id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpslash
References: http://pridels0.blogspot.com/2005/12/phpslash-sql-vuln.html, http://secunia.com/advisories/18150, http://www.osvdb.org/21873
CVE-2005-0864
The Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products, allows remote attackers to read arbitrary files via a full pathname in the HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: samsung_adsl_modem
References: http://exploitlabs.com/files/advisories/EXPL-A-2005-002-samsung-adsl.txt, http://www.securityfocus.com/bid/12864, http://zone-h.org/en/advisories/read/id=7339/
CVE-2005-3774
Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to create embryonic connections that that would not produce a valid connection with the end system, including (1) SYN packets with invalid checksums, which do not result in a RST; or, from an external interface, (2) one byte of "meaningless data," or (3) a TTL that is one less than needed to reach the internal destination.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pix
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038971.html, http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038983.html, http://secunia.com/advisories/17670
CVE-2005-0900
marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to obtain sensitive information via an invalid (1) file or (2) category parameter, which reveal the path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: nukebookmarks
References: http://marc.info/?l=bugtraq&m=111186145609320&w=2, http://nukebookmarks.sourceforge.net/, http://zone-h.org/advisories/read/id=7356
CVE-2005-0119
helvis 1.8h2_1 and earlier allows local users to recover and read the files of other users via the elvrec setuid program.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: helvis
References: http://www.vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html, http://www.vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html
CVE-2005-0507
Directory traversal vulnerability in SD Server 4.0.70 and earlier allows remote attackers to read arbitrary files via .. sequences in an HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sd_server
References: http://marc.info/?l=bugtraq&m=110910535122762&w=2, http://marc.info/?l=full-disclosure&m=110901639709476&w=2, http://secunia.com/advisories/14365
CVE-2005-1908
Perception LiteWeb allows remote attackers to bypass access controls for files via an extra leading / (slash) or leading \ (backslash) in the URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: liteweb
References: http://secunia.com/advisories/15592, http://securitytracker.com/id?1014096, http://www.osvdb.org/17084
CVE-2005-1979
Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service exception and exit) via an "unexpected protocol command during the reconnection request," which is not properly handled by the Transaction Internet Protocol (TIP) functionality.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, windows_xp, windows_2003_server
References: http://secunia.com/advisories/17161, http://secunia.com/advisories/17172, http://secunia.com/advisories/17223
CVE-2005-3850
Cross-site scripting (XSS) vulnerability in search.asp in Online Knowledge Base System (OKBSYS) Lite Edition 1.0 allows remote attackers to inject arbitrary web script or HTML via hex-encoded values in the q parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: okbsys_lite
References: http://pridels0.blogspot.com/2005/11/okbsys-lite-10-searchasp-xss-vuln.html, http://secunia.com/advisories/17713, http://www.osvdb.org/21094
CVE-2005-3114
Buffer overflow in the ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long third argument to the GotNate.Excute method.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: nateon_messenger
References: http://marc.info/?l=full-disclosure&m=112796492819343&w=2, http://secunia.com/advisories/16983, http://securitytracker.com/id?1014987
CVE-2005-2149
config.php in Cacti 0.8.6e and earlier allows remote attackers to set the no_http_headers switch, then modify session information to gain privileges and disable the use of addslashes to conduct SQL injection attacks.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cacti
References: http://securitytracker.com/id?1014361, http://sourceforge.net/mailarchive/forum.php?forum_id=10360&max_rows=25&style=flat&viewmonth=200507&viewday=1, http://www.cacti.net/downloads/patches/0.8.6e/cacti-0.8.6f_security.patch
CVE-2005-3582
ImageMagick before 6.2.4.2-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: imagemagick
References: http://secunia.com/advisories/17427/, http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml, http://www.osvdb.org/20528
CVE-2005-1290
Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) u parameter to profile.php, (2) highlight parameter to viewtopic.php, or (3) forumname or forumdesc parameters to admin_forums.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpbb
References: http://marc.info/?l=bugtraq&m=111428283721756&w=2, http://neosecurityteam.net/Advisories/Advisory-14.txt, http://marc.info/?l=bugtraq&m=111428283721756&w=2
CVE-2005-1582
Cross-site scripting (XSS) vulnerability in index.php for 1Two News 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) nom, (2) email, (3) siteweb, or (4) commentaire variables.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: 1two_news
References: http://securitytracker.com/id?1013960, http://securitytracker.com/id?1013960
CVE-2005-3252
Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code via a crafted UDP packet.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: snort
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0505.html, http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0010.html, http://secunia.com/advisories/17220
CVE-2005-3388
Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522, http://rhn.redhat.com/errata/RHSA-2006-0549.html, http://secunia.com/advisories/17371
CVE-2005-2193
SQL injection vulnerability in the user profile edit module in profile.php for PunBB 1.2.5 and earlier allows remote attackers to execute arbitrary SQL statements via the temp array, which is not initialized before it is used and prevents the attacker-supplied portions of the array from being properly escaped.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: punbb
References: http://marc.info/?l=bugtraq&m=112084384928950&w=2, http://www.hardened-php.net/advisory-082005.php, http://www.punbb.org/
CVE-2005-4004
Cross-site scripting (XSS) vulnerability in search.asp in MyTemplateSite 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mytemplatesite
References: http://pridels0.blogspot.com/2005/12/mytemplatesite-xss-vuln.html, http://secunia.com/advisories/17851, http://www.securityfocus.com/bid/15693
CVE-2005-2227
Softiacom wMailserver 1.0 stores passwords in plaintext in the Darsite\MAILSRV\Admin key, which allows local users to gain administrator privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: wmailserver
References: http://marc.info/?l=bugtraq&m=112120030308592&w=2, http://securitytracker.com/id?1014450, http://www.securityfocus.com/bid/14212
CVE-2005-3299
PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $__redirect parameter, possibly involving the subform array.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: phpmyadmin
References: http://secunia.com/advisories/17137, http://securityreason.com/securityalert/69, http://www.gentoo.org/security/en/glsa/glsa-200510-16.xml
CVE-2005-1357
text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: text.cgi
References: http://marc.info/?l=bugtraq&m=111445867315415&w=2, http://marc.info/?l=bugtraq&m=111445867315415&w=2
CVE-2005-3363
SQL injection vulnerability in Saphp Lesson, possibly saphp Lesson1.1 and saphpLesson2.0, allows remote attackers to execute arbitrary SQL commands via the forumid parameter in (1) showcat.php and (2) add.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: saphplesson
References: http://marc.info/?l=bugtraq&m=113018965520240&w=2, http://secunia.com/advisories/17308/, http://securityreason.com/securityalert/111
CVE-2005-3748
SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the query parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: nukeet
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://lostmon.blogspot.com/2005/11/nuke-et-search-module-query-variable.html, http://secunia.com/advisories/17638, http://www.osvdb.org/21002
CWE: CWE-89