Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-2162 State: PUBLISHED Published: 2005-07-06T04:00:00 Last Updated: 2024-08-07T22:15:37.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in form.inc.php3 in MyGuestbook 0.6.1 allows remote attackers to execute arbitrary PHP code via the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112059876828730&w=2 - http://www.soulblack.com.ar/repo/papers/advisory/myguestbook_advisory.txt - http://secunia.com/advisories/15927 - http://securitytracker.com/id?1014387
CVE ID: CVE-2005-2163 State: PUBLISHED Published: 2005-07-06T04:00:00 Last Updated: 2024-08-07T22:15:37.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in AutoIndex PHP Script 1.5.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112059745606348&w=2 - http://www.badroot.org/advisories/SA0x07 - http://secunia.com/advisories/15928
CVE ID: CVE-2005-2164 State: PUBLISHED Published: 2005-07-06T04:00:00 Last Updated: 2024-08-07T22:15:37.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Covide Groupware-CRM allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112060007704577&w=2 - http://sourceforge.net/project/shownotes.php?release_id=339047
CVE ID: CVE-2005-2165 State: PUBLISHED Published: 2005-07-06T04:00:00Z Last Updated: 2024-09-16T18:34:03.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: read.cgi in GlobalNoteScript allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014375 - http://zone-h.org/advisories/read/id=7765
CVE ID: CVE-2005-2166 State: PUBLISHED Published: 2005-07-06T04:00:00 Last Updated: 2024-08-07T22:15:37.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Plague News System 0.6 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15902 - http://dark-assassins.com/forum/viewtopic.php?t=90
CVE ID: CVE-2005-2167 State: PUBLISHED Published: 2005-07-06T04:00:00Z Last Updated: 2024-09-16T22:52:12.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Plague News System 0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15902 - http://dark-assassins.com/forum/viewtopic.php?t=90
CVE ID: CVE-2005-2168 State: PUBLISHED Published: 2005-07-06T04:00:00Z Last Updated: 2024-09-17T03:44:16.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: delete.php in Plague News System 0.6 and earlier allows remote unauthenticated attackers to delete news, comments, and shoutbox posts by modifying the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15902 - http://dark-assassins.com/forum/viewtopic.php?t=90
CVE ID: CVE-2005-2169 State: PUBLISHED Published: 2005-07-06T04:00:00Z Last Updated: 2024-09-17T04:25:15.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in source.php in Quick & Dirty PHPSource Printer 1.1 and earlier allows remote attackers to read arbitrary files via ".../...//" sequences in the file parameter, which are reduced to "../" when PHPSource Printer uses a regular expression to remove "../" sequences. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014376 - http://secunia.com/advisories/15900 - http://guff.szub.net/2005/07/04/quick-and-dirty-security/
CVE ID: CVE-2005-2170 State: PUBLISHED Published: 2005-07-11T04:00:00 Last Updated: 2024-08-07T22:15:37.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LCF component (lcfd) in IBM Tivoli Management Framework Endpoint allows remote attackers to cause a denial of service (process exit and connection loss) by connecting to LCF and ending the connection without sending any data. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15953 - http://www.securityfocus.com/bid/14194 - http://www-1.ibm.com/support/entdocview.wss?uid=swg21210334 - http://securitytracker.com/id?1014424 - http://www.vupen.com/english/advisories/2005/1018 - http
w.wss?uid=swg21210334 - http://securitytracker.com/id?1014424 - http://www.vupen.com/english/advisories/2005/1018 - http://www.corsaire.com/advisories/c041127-001.txt
CVE ID: CVE-2005-2173 State: PUBLISHED Published: 2005-07-08T04:00:00 Last Updated: 2024-08-07T22:15:37.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Flag::validate and Flag::modify functions in Bugzilla 2.17.1 to 2.18.1 and 2.19.1 to 2.19.3 do not verify that the flag ID is appropriate for the given bug or attachment ID, which allows users to change flags on arbitrary bugs and obtain a bug summary via process_bug.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014428 - https://bugzilla.mozilla.org/show_bug.cgi?id=293159 - http://www.bugzilla.org/security/2.18.1/
CVE ID: CVE-2005-2174 State: PUBLISHED Published: 2005-07-08T04:00:00Z Last Updated: 2024-09-17T03:08:05.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.17.x, 2.18 before 2.18.2, 2.19.x, and 2.20 before 2.20rc1 inserts a bug into the database before it is marked private, which introduces a race condition and allows attackers to access information about the bug via buglist.cgi before MySQL replication is complete. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=293159 - http://www.bugzilla.org/security/2.18.1/ - http://securitytracker.com/id?1014428
CVE ID: CVE-2005-2175 State: PUBLISHED Published: 2005-07-09T04:00:00 Last Updated: 2024-08-07T22:15:37.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014440 - http://archives.neohapsis.com/archives/bugtraq/2005-07/0075.html
CVE ID: CVE-2005-2176 State: PUBLISHED Published: 2005-07-09T04:00:00 Last Updated: 2024-08-07T22:15:37.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell NetMail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/0994 - http://secunia.com/advisories/15962 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972340.htm - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972433.htm - http://www.securityfocus.com/bid/14171
72340.htm - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972433.htm - http://www.securityfocus.com/bid/14171 - http://securitytracker.com/id?1014439 - http://www.osvdb.org/17821 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972438.htm
CVE ID: CVE-2005-2177 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-07T22:15:37.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote attackers to cause a denial of service (daemon hang and CPU consumption) via a TCP packet of length 1, which triggers an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4502 - http://secunia.com/advisories/17282 - http://www.ubuntu.com/usn/usn-190-1 - http://secunia.com/advisories/22875 - http://secunia.com/advisories/25373
/17282 - http://www.ubuntu.com/usn/usn-190-1 - http://secunia.com/advisories/22875 - http://secunia.com/advisories/25373 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9986 - http://www.securityfocus.com/bid/21256 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102725-1 - http://www.vmware.com/download/esx/esx-202-200610-patch.html - http://secunia.com/advisories/16999 - http://www.novell.com/linux/security/advisories/2007_12_sr.html - http://www.securityfocus.com/archive/1/451426/100/200/threaded - http://www.trustix.org/errata/2005/0034/ - http://www.debian.org/security/2005/dsa-873 - http://www.vmware.com/download/esx/esx-213-200610-pat
/errata/2005/0034/ - http://www.debian.org/security/2005/dsa-873 - http://www.vmware.com/download/esx/esx-213-200610-patch.html - http://secunia.com/advisories/15930 - http://secunia.com/advisories/23058 - http://www.vupen.com/english/advisories/2006/4677 - http://secunia.com/advisories/18635 - http://securitytracker.com/id?1017273 - http://support.avaya.com/elmodocs2/security/ASA-2005-225.pdf - http://www.vmware.com/download/esx/esx-254-200610-patch.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:025 - http://www.novell.com/linux/security/advisories/2005_24_sr.html - http://www.vupen.com/english/advisories/2007/1883 - http://www.redhat.com/support/errata/RHSA-2005-395.htm
_24_sr.html - http://www.vupen.com/english/advisories/2007/1883 - http://www.redhat.com/support/errata/RHSA-2005-395.html - http://www.novell.com/linux/security/advisories/2007_13_sr.html - http://secunia.com/advisories/17217 - http://www.redhat.com/support/errata/RHSA-2005-373.html - http://secunia.com/advisories/17135 - http://www.securityfocus.com/archive/1/451404/100/0/threaded - http://secunia.com/advisories/17007 - http://www.net-snmp.org/about/ChangeLog.html - http://sourceforge.net/mailarchive/forum.php?thread_id=7659656&forum_id=12455 - http://www.securityfocus.com/archive/1/451417/100/200/threaded - http://secunia.com/advisories/25787 - http://secunia.com/advisories/17343 - http://
/archive/1/451417/100/200/threaded - http://secunia.com/advisories/25787 - http://secunia.com/advisories/17343 - http://www.securityfocus.com/bid/14168 - http://www.securityfocus.com/archive/1/451419/100/200/threaded - http://secunia.com/advisories/25432 - http://www.redhat.com/support/errata/RHSA-2005-720.html
CVE ID: CVE-2005-2178 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-07T22:15:37.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: probe.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the olddat parameter. NOTE: it is unclear which product or vendor this program is associated with, if any. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112059815028059&w=2 - http://securitytracker.com/id?1014393 - http://www.badroot.org/advisories/SA0x06
CVE ID: CVE-2005-2179 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-07T22:15:37.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in BlogModel.php in Jaws 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014395 - http://www.hardened-php.net/advisory-072005.php - http://marc.info/?l=bugtraq&m=112067013827970&w=2
CVE ID: CVE-2005-2180 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-07T22:15:37.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passed to the -o argument and opens the file with write access, which allows local users to overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112066901231154&w=2 - http://www.pi3.int.pl/adv/gnats.txt - http://secunia.com/advisories/15963
CVE ID: CVE-2005-2181 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-07T22:15:37.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco 7940/7960 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/alerts/2005/Jul/1014406.html - http://marc.info/?l=bugtraq&m=112067698624686&w=2 - http://pentest.tele-consulting.com/advisories/05_07_06_voip-phones.txt - https://exchange.xforce.ibmcloud.com/vulnera
- http://pentest.tele-consulting.com/advisories/05_07_06_voip-phones.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/21260
CVE ID: CVE-2005-2182 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-07T22:15:37.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grandstream BudgeTone (BT) 100 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112067698624686&w=2 - http://www.securitytracker.com/alerts/2005/Jul/1014407.html - http://pentest.tele-consulting.com/advisories/05_07_06_voip-phones.txt - https://exchange.xforce.ibmcl
ul/1014407.html - http://pentest.tele-consulting.com/advisories/05_07_06_voip-phones.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/21260
CVE ID: CVE-2005-2183 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-07T22:15:37.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: class.xmail.php in PhpXmail 0.7 through 1.1 does not properly handle large passwords, which prevents an error message from being returned and allows remote attackers to bypass authentication and gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112067694016410&w=2 - http://secunia.com/advisories/15951
CVE ID: CVE-2005-2184 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-07T22:15:37.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: eRoom 6.x does not properly restrict files that can be attached, which allows remote attackers to execute arbitrary commands via a .lnk file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15940 - http://marc.info/?l=bugtraq&m=112069267700034&w=2
CVE ID: CVE-2005-2185 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-07T22:15:37.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: eRoom does not set an expiration for Cookies, which allows remote attackers to capture cookies and conduct replay attacks. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112069267700034&w=2
CVE ID: CVE-2005-2186 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-07T22:15:37.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in McAfee IntruShield Security Management System allow remote authenticated users to inject arbitrary web script or HTML via the (1) thirdMenuName or (2) resourceName parameter to SystemEvent.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112076813804503&w=2 - http://securitytracker.com/id?1014422 - http://secunia.com/advisories/15961 - http://marc.info/?l=bugtraq&m=112066594312876&w=2
CVE ID: CVE-2005-2187 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-07T22:15:37.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee IntruShield Security Management System allows remote authenticated users to access the "Generate Reports" feature and modify alerts by setting the Access option to true, as demonstrated using the (1) fullAccess or (2) fullAccessRight parameter in reports-column-center.jsp, or (3) fullAccess parameter to SystemEvent.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112076813804503&w=2 - http://securitytracker.com/id?1014422 - http://secunia.com/advisories/15961 - http://m
l=bugtraq&m=112076813804503&w=2 - http://securitytracker.com/id?1014422 - http://secunia.com/advisories/15961 - http://marc.info/?l=bugtraq&m=112066594312876&w=2
CVE ID: CVE-2005-2188 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-07T22:15:37.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee IntruShield Security Management System obtains the user ID from the URL, which allows remote attackers to guess the Manager account and possibly gain privileges via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112076813804503&w=2 - http://securitytracker.com/id?1014422 - http://marc.info/?l=bugtraq&m=112066594312876&w=2
CVE ID: CVE-2005-2189 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-07T22:15:37.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lantronix SecureLinx console server running firmware 2.0 and 3.0 stores /etc/ssh under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as SSH private keys. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15979 - http://marc.info/?l=bugtraq&m=112075990621765&w=2
CVE ID: CVE-2005-2190 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-07T22:15:37.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to comersus_optAffiliateRegistrationExec.asp or (2) idProduct parameter to comersus_optReviewReadExec.asp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112077057001064&w=2 - http://securitytracker.com/id?1014419
CVE ID: CVE-2005-2191 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-07T22:15:37.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Comersus shopping cart allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to comersus_backoffice_listAssignedPricesToCustomer.asp or (2) message parameter to comersus_backoffice_message.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15251 - http://marc.info/?l=bugtraq&m=112077057001064&w=2 - http://securitytracker.com/id?1014419 - http://downloads.securityfocus.com/vulnerabilities
gtraq&m=112077057001064&w=2 - http://securitytracker.com/id?1014419 - http://downloads.securityfocus.com/vulnerabilities/exploits/backoffice_mult_exp.pl
CVE ID: CVE-2005-2192 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-07T22:15:37.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: SimplePHPBlog 0.4.0 stores password hashes in config/password.txt with insufficient access control, which allows remote attackers to obtain passwords via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15954 - http://marc.info/?l=bugtraq&m=112075901100640&w=2
CVE ID: CVE-2005-2193 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-07T22:15:37.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the user profile edit module in profile.php for PunBB 1.2.5 and earlier allows remote attackers to execute arbitrary SQL statements via the temp array, which is not initialized before it is used and prevents the attacker-supplied portions of the array from being properly escaped. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112084384928950&w=2 - http://www.hardened-php.net/advisory-082005.php - http://www.punbb.org/
CVE ID: CVE-2005-2194 State: PUBLISHED Published: 2006-08-05T01:00:00 Last Updated: 2024-08-07T22:15:37.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Apple Mac OS X kernel before 10.4.2 allows remote attackers to cause a denial of service (kernel panic) via a crafted TCP packet, possibly related to source routing or loose source routing. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21335 - http://www.securityfocus.com/bid/14241 - http://docs.info.apple.com/article.html?artnum=301948 - http://securitytracker.com/id?1014464 - http://l
com/bid/14241 - http://docs.info.apple.com/article.html?artnum=301948 - http://securitytracker.com/id?1014464 - http://lists.apple.com/archives/Security-announce/2005/Jul/msg00000.html - http://www.osvdb.org/17880
CVE ID: CVE-2005-2195 State: PUBLISHED Published: 2005-07-17T04:00:00 Last Updated: 2024-08-07T22:15:37.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Darwin Streaming Server 5.5 and earlier allows remote attackers to cause a denial of service (application crash) via a URL with a filename containing a .cgi extension and an MS-DOS device name such as AUX, CON, PRN, COM1, or LPT1, a different vulnerability than CVE-2003-0421 and CVE-2003-0502. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112126999514361&w=2 - http://securitytracker.com/id?1014474 - http://secway.org/Advisory/AD20050713.txt - http://secunia.com/advisories/
w=2 - http://securitytracker.com/id?1014474 - http://secway.org/Advisory/AD20050713.txt - http://secunia.com/advisories/16056
CVE ID: CVE-2005-2196 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T22:15:37.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Apple AirPort card uses a default WEP key when not connected to a known or trusted network, which can cause it to automatically connect to a malicious network. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014522 - http://www.securityfocus.com/bid/14321
CVE ID: CVE-2005-2197 State: PUBLISHED Published: 2005-07-11T04:00:00 Last Updated: 2024-08-07T22:15:37.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in sql.cls.php in Id Board 1.1.3 allows remote attackers to modify SQL queries, as demonstrated using the f parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=112098888903080&w=2 - http://www.securityfocus.com/bid/14204 - http://secunia.com/advisories/15976 - http://securitytracker.com/id?1014438
CVE ID: CVE-2005-2198 State: PUBLISHED Published: 2005-07-11T04:00:00 Last Updated: 2024-08-07T22:15:37.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lang.php in SPiD before 1.3.1 allows remote attackers to execute arbitrary code via the lang_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16022 - http://www.securityfocus.com/bid/14208 - http://securitytracker.com/id?1014437 - http://spid.adnx.net/index_en.html#log