Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-3998 State: PUBLISHED Published: 2005-12-05T00:00:00 Last Updated: 2024-08-07T23:31:48.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.asp in Solupress News 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17854 - http://www.osvdb.org/21430 - http://pridels0.blogspot.com/2005/12/solupress-news-xss-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/23427 - http://www.securityfocus.com/bid/15695 - http://www.vupen.com/english/advisories/2005/2719
CVE ID: CVE-2005-3999 State: PUBLISHED Published: 2005-12-05T00:00:00 Last Updated: 2024-08-07T23:31:48.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Search.asp in SiteBeater MP3 Catalog 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21424 - http://secunia.com/advisories/17856 - http://www.vupen.com/english/advisories/2005/2718 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23403 - http://pridels0.blogspot.com/2005/12/sitebeater-mp3-catalog-xss-vuln.html - http://www.securityfoc
lnerabilities/23403 - http://pridels0.blogspot.com/2005/12/sitebeater-mp3-catalog-xss-vuln.html - http://www.securityfocus.com/bid/15696
CVE ID: CVE-2005-4000 State: PUBLISHED Published: 2005-12-05T00:00:00 Last Updated: 2024-08-07T23:31:48.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in archive.asp in SiteBeater News System 4.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the sKeywords parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15697 - http://secunia.com/advisories/17857 - http://pridels0.blogspot.com/2005/12/sitebeater-news-system-xss-vuln.html - http://www.osvdb.org/21436 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23452 - http://www.vupen.com/english/ad
ttp://www.osvdb.org/21436 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23452 - http://www.vupen.com/english/advisories/2005/2717
CVE ID: CVE-2005-4001 State: PUBLISHED Published: 2005-12-05T00:00:00 Last Updated: 2024-08-07T23:31:48.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpYellowTM Pro Edition and Lite Edition 5.33 allow remote attackers to execute arbitrary SQL commands via the (1) haystack parameter to search_result.php or (2) ckey parameter to print_me.php. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/phpyellowtm-pro-edition-sql-inj-vuln.html - http://www.vupen.com/english/advisories/2005/2722 - http://secunia.com/advisories/17849 - http://www.osvdb.org/21428 - http://www.osvdb.org/21429 - ht
dvisories/2005/2722 - http://secunia.com/advisories/17849 - http://www.osvdb.org/21428 - http://www.osvdb.org/21429 - http://www.securityfocus.com/bid/15700
CVE ID: CVE-2005-4002 State: PUBLISHED Published: 2005-12-05T00:00:00Z Last Updated: 2024-09-16T18:56:23.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebEOC before 6.0.2 uses the same secret key for all installations, which allows attackers with the key to decrypt data from any WebEOC installation. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/388282
CVE ID: CVE-2005-4003 State: PUBLISHED Published: 2005-12-05T00:00:00 Last Updated: 2024-08-07T23:31:48.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Absolute Shopping Package Solutions (ASPS) Shopping Cart Professional 2.9d and earlier, and Lite 2.1 and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) srch_product_name parameter to adv_search.asp and (2) b_search parameter to bsearch.asp. NOTE: the original disclosure was specifically only for an XSS issue, but the CVE description was for SQL injection. Since the original disclosure, SQL injection vectors have been reported. This CVE might be REJECTed o
for SQL injection. Since the original disclosure, SQL injection vectors have been reported. This CVE might be REJECTed or significantly altered pending additional information. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/asps-shopping-cart-professional-and.html - http://www.securityfocus.com/bid/15694
CVE ID: CVE-2005-4004 State: PUBLISHED Published: 2005-12-05T00:00:00 Last Updated: 2024-08-07T23:31:48.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.asp in MyTemplateSite 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15693 - http://secunia.com/advisories/17851 - http://pridels0.blogspot.com/2005/12/mytemplatesite-xss-vuln.html - http://www.vupen.com/english/advisories/2005/2721
CVE ID: CVE-2005-4005 State: PUBLISHED Published: 2005-12-05T01:00:00 Last Updated: 2024-08-07T23:31:48.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information and possibly execute arbitrary SQL commands via the srch_text parameter in a Search and Sort option to messages.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15698 - http://securityreason.com/securityalert/31 - http://www.osvdb.org/21415 - http://www.securityfocus.com/archive/1/418512 - http://secunia.com/advisories/17871 - http://www.vupen.com/english/ad
- http://www.securityfocus.com/archive/1/418512 - http://secunia.com/advisories/17871 - http://www.vupen.com/english/advisories/2005/2730
CVE ID: CVE-2005-4006 State: PUBLISHED Published: 2005-12-05T01:00:00 Last Updated: 2024-08-07T23:31:48.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAPID CMS before 1.2.3.03 allows remote attackers to bypass authentication via direct requests to the usr/system files (1) insert_file.php, (2) insert_image.php, (3) insert_link.php, (4) insert_qcfile.php, and (5) edit.php. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=375289&group_id=118100 - http://www.vupen.com/english/advisories/2005/2703 - http://www.osvdb.org/21389 - http://sapid-club.com/en/viewtopic.php?p=586#586 - http://www.securityfocus.com/b
05/2703 - http://www.osvdb.org/21389 - http://sapid-club.com/en/viewtopic.php?p=586#586 - http://www.securityfocus.com/bid/15689 - http://secunia.com/advisories/17859
CVE ID: CVE-2005-4007 State: PUBLISHED Published: 2005-12-05T01:00:00Z Last Updated: 2024-09-17T00:26:12.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in SAPID CMS before 1.2.3.03, related to newly registered users and possibly authorization checks, have unknown impact and attack vectors involving (1) mvc/controller/user_request_analysis.inc.php and (2) usr/xml/ddc/authorization.xml. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=375289&group_id=118100 - http://sapid-club.com/en/viewtopic.php?p=586#586
CVE ID: CVE-2005-4008 State: PUBLISHED Published: 2005-12-05T11:00:00 Last Updated: 2024-08-07T23:31:48.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in jax_calendar.php in Jax Calendar 1.34 allows remote attackers to execute arbitrary SQL commands via the (1) cal_id parameter, and possibly the (2) Y and (3) m parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/11/jax-calendar-134-vuln.html - http://www.securityfocus.com/bid/16130 - http://www.osvdb.org/21406
CVE ID: CVE-2005-4009 State: PUBLISHED Published: 2005-12-05T11:00:00 Last Updated: 2024-08-07T23:31:48.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cid and (2) catid parameters to (a) day.php, (b) week.php, (c) month.php, and (d) year.php. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/11/calendar-express-2-sql-inj-vuln.html - http://www.osvdb.org/21403 - http://www.osvdb.org/21405 - http://www.osvdb.org/21402
CVE ID: CVE-2005-4010 State: PUBLISHED Published: 2005-12-05T11:00:00 Last Updated: 2024-08-07T23:31:48.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in KBase Express 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to category.php and (2) search parameters to search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21340 - http://www.vupen.com/english/advisories/2005/2641 - http://secunia.com/advisories/17806 - http://www.osvdb.org/21341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23309 - http://www.securityfocus.com/bid/15635 - http://pridels
1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23309 - http://www.securityfocus.com/bid/15635 - http://pridels0.blogspot.com/2005/11/kbase-express-sql-inj-vuln.html
CVE ID: CVE-2005-4011 State: PUBLISHED Published: 2005-12-05T11:00:00 Last Updated: 2024-08-07T23:31:49.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4.2, 4.1.3, and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016364 - http://secunia.com/advisories/17799 - http://www.securityfocus.com/archive/1/438580/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27362 - http://www.osvdb.org/27539 - http://www.attrition.org/pipermail/v
//exchange.xforce.ibmcloud.com/vulnerabilities/27362 - http://www.osvdb.org/27539 - http://www.attrition.org/pipermail/vim/2006-December/001154.html - http://www.securityfocus.com/bid/18593 - http://www.securityfocus.com/bid/15636 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23312 - http://www.vupen.com/english/advisories/2005/2652 - http://www.osvdb.org/21195 - http://ltwcalendar.sourceforge.net/changelog.php - http://www.Silitix.com/calendar-cws.php - http://pridels0.blogspot.com/2005/11/codewalkers-ltwcalendar-4x-sql-inj.html - http://www.securityfocus.com/archive/1/438232/100/0/threaded
CVE ID: CVE-2005-4012 State: PUBLISHED Published: 2005-12-05T11:00:00 Last Updated: 2024-08-07T23:31:48.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrary web script or HTML via (1) the lastnumber parameter to stat.php and (2) the HTTP referer to pixel.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2645 - http://freewebstat.com/changelog-english.html - http://www.osvdb.org/21212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23385 - http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/
212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23385 - http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html - http://www.osvdb.org/21208 - http://secunia.com/advisories/17789 - http://www.securityfocus.com/bid/15603 - http://www.ush.it/2005/11/19/php-web-statistik/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/23379
CVE ID: CVE-2005-4013 State: PUBLISHED Published: 2005-12-05T11:00:00 Last Updated: 2024-08-07T23:31:48.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Web Statistik 1.4 stores the stat.cfg file under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as statistics and the log directory location, possibly including the logdb.dta file. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21210 - http://www.vupen.com/english/advisories/2005/2645 - http://freewebstat.com/changelog-english.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/23382 - http://www.osvdb.org/2120
stat.com/changelog-english.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/23382 - http://www.osvdb.org/21209 - http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html - http://secunia.com/advisories/17789 - http://www.ush.it/2005/11/19/php-web-statistik/
CVE ID: CVE-2005-4014 State: PUBLISHED Published: 2005-12-05T11:00:00 Last Updated: 2024-08-07T23:31:48.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: stat.php in PHP Web Statistik 1.4 allows remote attackers to cause a denial of service (CPU consumption) via a large lastnumber value. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2645 - http://freewebstat.com/changelog-english.html - http://www.osvdb.org/21211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23384 - http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html - http://secunia.com/advisories/17789 - http://www.ush.it/2005/11/19/php-we
art.de/archive/bugtraq/2005/11/msg00325.html - http://secunia.com/advisories/17789 - http://www.ush.it/2005/11/19/php-web-statistik/
CVE ID: CVE-2005-4015 State: PUBLISHED Published: 2005-12-05T11:00:00 Last Updated: 2024-08-07T23:31:48.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Web Statistik 1.4 does not rotate the log database or limit the size of the referer field, which allows remote attackers to fill the log files via a large number of requests, as demonstrated using pixel.php. Additional Analyst Notes: - CVE Program Container: References: - http://freewebstat.com/changelog-english.html - http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html - http://www.ush.it/2005/11/19/php-web-statistik/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/23386 - http://securityreason.com/s
2005/11/19/php-web-statistik/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/23386 - http://securityreason.com/securityalert/214
CVE ID: CVE-2005-4016 State: PUBLISHED Published: 2005-12-05T11:00:00 Last Updated: 2024-08-07T23:31:48.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Widget Property 1.1.19 allows remote attackers to execute arbitrary SQL commands via the (1) property_id, (2) zip_code, (3) property_type_id, (4) price, and (5) city_id parameters to property.php. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/widget-property-vuln.html - http://www.osvdb.org/21426 - http://www.securityfocus.com/bid/15701 - http://www.vupen.com/english/advisories/2005/2741 - http://secunia.com/advisories/17829
CVE ID: CVE-2005-4017 State: PUBLISHED Published: 2005-12-05T11:00:00 Last Updated: 2024-08-07T23:31:48.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: property.php in Widget Property 1.1.19 allows remote attackers to obtain the full server path via an invalid lang value, which leaks the path in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21427 - http://pridels0.blogspot.com/2005/12/widget-property-vuln.html - http://secunia.com/advisories/17829
CVE ID: CVE-2005-4018 State: PUBLISHED Published: 2005-12-05T11:00:00 Last Updated: 2024-08-07T23:31:48.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ls.php in Landshop Real Estate Commerce System 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) start, (2) search_order, (3) search_type, (4) search_area, and (5) keyword parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2724 - http://www.securityfocus.com/bid/15709 - http://secunia.com/advisories/17843 - http://pridels0.blogspot.com/2005/12/landshop-real-estate-commerce-system.html - ht
ttp://secunia.com/advisories/17843 - http://pridels0.blogspot.com/2005/12/landshop-real-estate-commerce-system.html - http://www.osvdb.org/21433
CVE ID: CVE-2005-4019 State: PUBLISHED Published: 2005-12-05T11:00:00 Last Updated: 2024-08-07T23:31:49.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Relative Real Estate Systems 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the mls parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17846 - http://pridels0.blogspot.com/2005/12/relative-real-estate-systems-sql-inj.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/23435 - http://www.vupen.com/english/advisories/2005/2723 - http://www.osvdb.org/21432 - http://www.securityfocus.com/bid/15
5 - http://www.vupen.com/english/advisories/2005/2723 - http://www.osvdb.org/21432 - http://www.securityfocus.com/bid/15714
CVE ID: CVE-2005-4020 State: PUBLISHED Published: 2005-12-05T11:00:00 Last Updated: 2024-08-07T23:31:49.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in create.php in Widget Imprint 1.0.26 and earlier allows remote attackers to execute arbitrary SQL commands via the product_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21435 - http://secunia.com/advisories/17840 - http://pridels0.blogspot.com/2005/12/widget-imprint-sql-inj-vuln.html - http://www.vupen.com/english/advisories/2005/2740
CVE ID: CVE-2005-4021 State: PUBLISHED Published: 2005-12-05T11:00:00 Last Updated: 2024-08-07T23:31:48.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installer for Gallery 2.0 before 2.0.2 stores the install log under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15614 - http://www.securityfocus.com/archive/1/418200/100/0/threaded - http://www.vupen.com/english/advisories/2005/2681
CVE ID: CVE-2005-4022 State: PUBLISHED Published: 2005-12-05T11:00:00 Last Updated: 2024-08-07T23:31:48.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "Add Image From Web" feature in Gallery 2.0 before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21221 - http://secunia.com/advisories/17747 - http://www.securityfocus.com/bid/15614 - http://www.securityfocus.com/archive/1/418200/100/0/threaded - http://www.vupen.com/english/advisories/2005/2681
CVE ID: CVE-2005-4023 State: PUBLISHED Published: 2005-12-05T11:00:00 Last Updated: 2024-08-07T23:31:48.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the zipcart module in Gallery 2.0 before 2.0.2 allows remote attackers to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17747 - http://www.securityfocus.com/bid/15614 - http://www.securityfocus.com/archive/1/418200/100/0/threaded - http://www.vupen.com/english/advisories/2005/2681
CVE ID: CVE-2005-4024 State: PUBLISHED Published: 2005-12-05T11:00:00 Last Updated: 2024-08-07T23:31:48.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Interspire FastFind 2004 and 2005 allows remote attackers to inject arbitrary web script or HTML via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2692 - http://pridels0.blogspot.com/2005/12/interspire-fastfind-2005-xss-vuln.html
CVE ID: CVE-2005-4025 State: PUBLISHED Published: 2005-12-05T11:00:00Z Last Updated: 2024-09-16T17:42:44.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navigating to accountsetup.php and creating a new user. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015307
CVE ID: CVE-2005-4026 State: PUBLISHED Published: 2005-12-05T11:00:00 Last Updated: 2024-08-07T23:31:48.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: search.php in Geeklog 1.4.x before 1.4.0rc1, and 1.3.x before 1.3.11sr3, allows remote attackers to obtain sensitive information via invalid (1) datestart and (2) dateend parameters, which leaks the web server path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.geeklog.net/article.php/geeklog-1.3.11sr3 - http://www.osvdb.org/21398 - http://pridels0.blogspot.com/2005/11/geeklog-14x-full-path-disclosure-vuln.html
CVE ID: CVE-2005-4027 State: PUBLISHED Published: 2005-12-05T11:00:00 Last Updated: 2024-08-07T23:31:48.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SimpleBBS 1.1 allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21399 - http://pridels0.blogspot.com/2005/11/simplebbs-v11-sql-inj-vuln.html - http://www.securityfocus.com/bid/15594
CVE ID: CVE-2005-4028 State: PUBLISHED Published: 2005-12-05T11:00:00Z Last Updated: 2024-09-17T03:12:48.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in aMember allow remote attackers to inject arbitrary web script or HTML via the (1) lamember_login parameter to sendpass.php and (2) login parameter to member.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21012 - http://www.osvdb.org/21013 - http://securitytracker.com/id?1015208
CVE ID: CVE-2005-4029 State: PUBLISHED Published: 2005-12-05T11:00:00Z Last Updated: 2024-09-17T01:16:44.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebEOC before 6.0.2 allows remote attackers to obtain valid usernames via the HTML source of the WebEOC login webpage, which could be useful in other attacks such as locking out valid users via brute force methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/170394
CVE ID: CVE-2005-4030 State: PUBLISHED Published: 2005-12-06T11:00:00 Last Updated: 2024-08-07T23:31:48.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Quicksilver Forums before 1.5.1 allows remote attackers to execute arbitrary SQL commands via the HTTP_USER_AGENT header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15710 - http://sourceforge.net/project/shownotes.php?release_id=375970&group_id=154354 - http://secunia.com/advisories/17861 - http://www.vupen.com/english/advisories/2005/2729 - http://www.osvdb.org/21443