Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-1387 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:02.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/315794 - http://www.securityfocus.com/archive/1/311194 - http://www.securityfocus.com/bid/6811 - http://securityreason.com/securityalert/3253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11281
CVE ID: CVE-2003-1388 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:03.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Opera 7.02 Build 2668 allows remote attackers to crash Opera via a long HTTP request ending in a .ZIP extension. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11740 - http://archives.neohapsis.com/archives/bugtraq/2003-04/0116.html
CVE ID: CVE-2003-1389 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:03.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: RTS CryptoBuddy 1.2 and earlier truncates long passphrases without warning the user, which may make it easier to conduct certain brute force guessing attacks. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11294 - http://www.securityfocus.com/bid/6815 - http://www.securityfocus.com/archive/1/311176
CVE ID: CVE-2003-1390 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:03.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: RTS CryptoBuddy 1.2 and earlier stores bytes 53 through 55 of a 55-byte passphrase in plaintext, which makes it easier for local users to guess the passphrase. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11297 - http://www.securityfocus.com/archive/1/311176
CVE ID: CVE-2003-1391 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:02.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: RTS CryptoBuddy 1.0 and 1.2 uses a weak encryption algorithm for the passphrase and generates predictable keys, which makes it easier for attackers to guess the passphrase. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11298 - http://www.securityfocus.com/archive/1/311176 - http://www.securityfocus.com/bid/6810
CVE ID: CVE-2003-1392 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:03.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: CryptoBuddy 1.0 and 1.2 does not use the user-supplied passphrase to encrypt data, which could allow local users to use their own passphrase to decrypt the data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11317 - http://www.securityfocus.com/bid/6812 - http://www.securityfocus.com/archive/1/311176
CVE ID: CVE-2003-1393 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:03.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Gupta SQLBase 8.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long EXECUTE command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/311159 - http://secunia.com/advisories/8023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11269 - http://www.securityfocus.com/bid/6808 - http://securityreason.com/securityalert/3256 - http://www.securityfocus.com/archive/1/314379
CVE ID: CVE-2003-1394 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:03.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoffeeCup Software Password Wizard 4.0 stores sensitive information such as usernames and passwords in a .apw file under the web document root with insufficient access control, which allows remote attackers to obtain that information via a direct request for the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11447 - http://www.securityfocus.com/archive/1/313580 - http://securityreason.com/securityalert/3259
CVE ID: CVE-2003-1395 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:03.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in KaZaA Media Desktop 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a response to the ad server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/309935 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11228 - http://securityreason.com/securityalert/3252 - http://www.securityfocus.com/bid/6747
CVE ID: CVE-2003-1396 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:02.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Opera 6.05 through 7.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a filename with a long extension. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-04/0346.html - http://www.securityfocus.com/bid/7450 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11894
CVE ID: CVE-2003-1397 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:02.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PluginContext object of Opera 6.05 and 7.0 allows remote attackers to cause a denial of service (crash) via an HTTP request containing a long string that gets passed to the ShowDocument method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6814 - http://www.securityfocus.com/archive/1/311214 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11280 - http://securityreason.com/securityalert/3255
CVE ID: CVE-2003-1398 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:03.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.0 through 12.2, when IP routing is disabled, accepts false ICMP redirect messages, which allows remote attackers to cause a denial of service (network routing modification). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11306 - http://www.securityfocus.com/bid/6823 - http://securitytracker.com/id?1006075 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0131.html
CVE ID: CVE-2003-1399 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:03.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: eject 2.0.10, when installed setuid on systems such as SuSE Linux 7.3, generates different error messages depending on whether a specified file exists or not, which allows local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6914 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0278.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11380
CVE ID: CVE-2003-1400 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:02.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Your_Account module for PHP-Nuke 5.0 through 6.0 allows remote attackers to inject arbitrary web script or HTML via the user_avatar parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/309959 - http://www.securityfocus.com/archive/1/310115 - http://www.securityfocus.com/bid/6750 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11229
CVE ID: CVE-2003-1401 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: login.php in php-Board 1.0 stores plaintext passwords in $username.txt with insufficient access control under the web document root, which allows remote attackers to obtain sensitive information via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0069.html - http://www.securityfocus.com/bid/6862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11338
CVE ID: CVE-2003-1402 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:02.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in hit.php for Kietu 2.0 and 2.3 allows remote attackers to execute arbitrary PHP code via the url_hit parameter, a different vulnerability than CVE-2006-5015. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11341 - http://www.osvdb.org/3777 - http://www.securityfocus.com/bid/6863 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0071.html - http://secunia.com/advisories/10754
CVE ID: CVE-2003-1403 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: foo.php3 in DotBr 0.1 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11353 - http://www.securityfocus.com/bid/6864 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0070.html
CVE ID: CVE-2003-1404 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:02.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: DotBr 0.1 stores config.inc with insufficient access control under the web document root, which allows remote attackers to obtain sensitive information such as SQL usernames and passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6865 - http://www.osvdb.org/5092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11354 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0070.html
CVE ID: CVE-2003-1405 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: DotBr 0.1 allows remote attackers to execute arbitrary shell commands via the cmd parameter to (1) exec.php3 or (2) system.php3. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6866 - http://www.osvdb.org/5089 - http://www.osvdb.org/5090 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0070.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11355 - http://www.securityfocus.com/bid/6867
CVE ID: CVE-2003-1406 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in D-Forum 1.00 through 1.11 allows remote attackers to execute arbitrary PHP code via a URL in the (1) my_header parameter to header.php3 or (2) my_footer parameter to footer.php3. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0072.html - http://www.securityfocus.com/bid/6879 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11342
CVE ID: CVE-2003-1407 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/311359 - http://www.securityfocus.com/bid/6829 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11329 - http://securityreason.com/securityalert/3251
CVE ID: CVE-2003-1408 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:02.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a filename with a trailing dot. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/311806 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11311 - http://www.securityfocus.com/bid/6841 - http://www.securityfocus.com/archive/1/311660
CVE ID: CVE-2003-1409 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:02.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOPo 1.43 allows remote attackers to obtain sensitive information by sending an HTTP request with an invalid parameter to (1) in.php or (2) out.php, which reveals the path to the TOPo directory in the error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11248 - http://secunia.com/advisories/8008 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0049.html
CVE ID: CVE-2003-1410 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in email.php (aka email.php3) in Cedric Email Reader 0.2 and 0.3 allows remote attackers to execute arbitrary PHP code via the cer_skin parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5487 - http://www.securityfocus.com/bid/6818 - http://secunia.com/advisories/8024 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11278 - http://www.securityfocus.com/archive/1/311173
CVE ID: CVE-2003-1411 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in emailreader_execute_on_each_page.inc.php in Cedric Email Reader 0.4 allows remote attackers to execute arbitrary PHP code via the emailreader_ini parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6820 - http://www.osvdb.org/5900 - http://secunia.com/advisories/8024 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11278 - http://www.securityfocus.com/archive/1/311173
CVE ID: CVE-2003-1412 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator (GOsa) 1.0 allows remote attackers to execute arbitrary PHP code via the plugin parameter to (1) 3fax/1blocklists/index.php; (2) 6departamentadmin/index.php, (3) 5terminals/index.php, (4) 4mailinglists/index.php, (5) 3departaments/index.php, and (6) 2groupd/index.php in 2administration/; or (7) the base parameter to include/help.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/8120 - https://
help.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/8120 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11408 - http://www.securityfocus.com/archive/1/313282/30/25760/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2003-February/003932.html - http://www.securityfocus.com/bid/6922 - http://www.securitytracker.com/id?1006162
CVE ID: CVE-2003-1413 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:02.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: parse_xml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the existence of arbitrary files by using ".." sequences in the filename parameter and comparing the resulting error messages. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3260 - http://www.securityfocus.com/archive/1/313517 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11445 - http://www.securityfocus.com/bid/6992
CVE ID: CVE-2003-1414 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to read arbitrary files via a ... (triple dot) in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3260 - http://www.securityfocus.com/archive/1/313517 - http://www.securityfocus.com/bid/6990 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11446
CVE ID: CVE-2003-1415 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetCharts XBRL Server 4.0.0 allows remote attackers to obtain sensitive information via an HTTP request with an invalid chunked transfer encoding specification. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11345 - http://secunia.com/advisories/8091 - http://www.securityfocus.com/bid/6877 - http://www.securityfocus.com/archive/1/312187
CVE ID: CVE-2003-1416 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: BisonFTP Server 4 release 2 allows remote attackers to cause a denial of service (CPU consumption) via a long (1) ls or (2) cwd command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/312032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11346 - http://www.securityfocus.com/bid/6869
CVE ID: CVE-2003-1417 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: nCipher Support Software 6.00, when using generatekey KeySafe to import keys, does not delete the temporary copies of the key, which may allow local users to gain access to the key by reading the (1) key.pem or (2) key.der files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6927 - http://www.ncipher.com/support/advisories/advisory7_keyduplicates.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11422 - http://marc.info/?l=bugtraq&m=104619088801750&w=2
CVE ID: CVE-2003-1418 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via (1) the ETag header, which reveals the inode number, or (2) multipart MIME boundary, which reveals child process IDs (PID). Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.openbsd.org/errata32.html - http://www.securityfocus.com/bid/6939 - http://www.securityfocus.com/bid/6943 - https://exchange.xforce.ibmcloud.c
tml - http://www.securityfocus.com/bid/6939 - http://www.securityfocus.com/bid/6943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11438
CVE ID: CVE-2003-1419 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netscape 7.0 allows remote attackers to cause a denial of service (crash) via a web page with an invalid regular expression argument to the JavaScript reformatDate function. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-02/0338.html - http://www.securityfocus.com/bid/6959 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11444
CVE ID: CVE-2003-1420 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Opera 6.0 through 7.0 with automatic redirection disabled allows remote attackers to inject arbitrary web script or HTML via the HTTP Location header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11423 - http://www.securityfocus.com/bid/6962 - http://www.securityfocus.com/archive/1/313216
CVE ID: CVE-2003-1421 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:02.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in mod_mysql_logger shared object in SuckBot 0.006 allows remote attackers to cause a denial of service (seg fault) via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6854 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11340
CVE ID: CVE-2003-1422 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:02.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the installer for SYSLINUX 2.01, when running setuid root, allow local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/8077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11351 - http://syslinux.zytor.com/history.php - http://www.securityfocus.com/bid/6876
CVE ID: CVE-2003-1423 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Petitforum stores the liste.txt data file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as e-mail addresses and encrypted passwords. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11358 - http://securitytracker.com/id?1006117
CVE ID: CVE-2003-1424 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: message.php in Petitforum does not properly authenticate users, which allows remote attackers to impersonate forum users via a modified connect cookie. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1006117 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11359
CVE ID: CVE-2003-1425 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0087.html - http://www.securityfocus.com/bid/6882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11356