Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
04-September/026955.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17533 - http://www.osvdb.org/10371 - http://www.osvdb.org/10370
CVE ID: CVE-2004-2159 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in XMLStarlet Command Line XML Toolkit 0.9.3 have unknown impact and attack vectors via (1) xml_elem.c and (2) xml_select.c. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1011496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17580 - http://www.securityfocus.com/bid/11270 - http://www.osvdb.org/10074 - http://sourceforge.net/project/shownotes.php?release_id=268962
CVE ID: CVE-2004-2160 State: PUBLISHED Published: 2005-07-10T04:00:00Z Last Updated: 2024-09-16T22:31:07.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in xml_elem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a denial of service or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.sourceforge.net/viewcvs.py/xmlstar/xmlstarlet/src/xml_elem.c?r1=1.17&r2=1.18 - http://sourceforge.net/project/shownotes.php?release_id=268962
CVE ID: CVE-2004-2161 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in file_overview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands via the link_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1011363 - http://www.osvdb.org/10164 - http://www.debian.org/security/2006/dsa-980 - http://www.securityfocus.com/archive/1/375757 - http://secunia.com/advisories/12606/ - http://cvs.sourceforge.net/viewcvs.py/tutos/tutos/php/file/file_overview.php?r1=1.11.2.1&r2=1.11.2.2 - http://www.secu
- http://cvs.sourceforge.net/viewcvs.py/tutos/tutos/php/file/file_overview.php?r1=1.11.2.1&r2=1.11.2.2 - http://www.securityfocus.com/bid/11221 - http://secunia.com/advisories/18954 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17444
CVE ID: CVE-2004-2162 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the search field of the Address Module or (2) the t parameter to app_new.php. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.sourceforge.net/viewcvs.py/tutos/tutos/php/app_new.php?r1=1.58&r2=1.59 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17445 - http://www.debian.org/security/2006/dsa-980 - http://www.securityfocus.com/archive/1/375757 - http://secunia.
es/17445 - http://www.debian.org/security/2006/dsa-980 - http://www.securityfocus.com/archive/1/375757 - http://secunia.com/advisories/12606/ - http://www.securityfocus.com/bid/11221 - http://secunia.com/advisories/18954
CVE ID: CVE-2004-2163 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: login_radius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret in a response packet from a RADIUS server, which allows remote attackers to bypass authentication by spoofing server replies. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0058.html - http://www.openbsd.org/errata35.html#radius - http://www.securityfocus.com/bid/11227 - http://www.reseau.nl/advisories/0400-openbsd-radius.txt - https://exchange.xforce.ibmclou
.securityfocus.com/bid/11227 - http://www.reseau.nl/advisories/0400-openbsd-radius.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/17456 - http://www.osvdb.org/10203 - http://secunia.com/advisories/12617
CVE ID: CVE-2004-2164 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: shoprestoreorder.asp in VP-ASP 5.0 does not close the database connection when a user restores a previous order, which allows remote attackers to cause a denial of service (connection consumption). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11228 - http://www.osvdb.org/10071 - http://www.vpasp.com/virtprog/info/faq_securityfixes.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/17436 - http://secunia.com/advisories/12611 - http://www.securitytracker.com/alerts/200
rce.ibmcloud.com/vulnerabilities/17436 - http://secunia.com/advisories/12611 - http://www.securitytracker.com/alerts/2004/Sep/1011359.html
CVE ID: CVE-2004-2165 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lords of the Realm III 1.01 and earlier, when in the lobby stage, allows remote attackers to cause a denial of service (crash from unallocated memory write) via a long user nickname. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/lotr3boom-adv.txt - http://secunia.com/advisories/12589/ - http://www.osvdb.org/10078 - http://www.securityfocus.com/bid/11223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17438 - http://seclists.org/lists/fulldisclosure/2004/Sep/0660.html -
tps://exchange.xforce.ibmcloud.com/vulnerabilities/17438 - http://seclists.org/lists/fulldisclosure/2004/Sep/0660.html - http://securitytracker.com/id?1011361
CVE ID: CVE-2004-2166 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: The print-from-email feature in the Canon ImageRUNNER (iR) 5000i and C3200 digital printer, when not using IP address range filtering, allows remote attackers to print arbitrary text without authentication via a text/plain email to TCP port 25. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17512 - http://www.securityfocus.com/archive/1/376242 - http://secunia.com/advisories/12659/
CVE ID: CVE-2004-2167 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via (1) the expandmacro function, and possibly (2) Environments and (3) TranslateCommand. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/alerts/2004/Sep/1011367.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17487 - http://cvs.sourceforge.net/viewcvs.py/latex2rtf/latex2rtf/definitions.c?rev=1.22&view=log - http://www.securityfocus.com/bid/1123
s.sourceforge.net/viewcvs.py/latex2rtf/latex2rtf/definitions.c?rev=1.22&view=log - http://www.securityfocus.com/bid/11233 - http://www.osvdb.org/displayvuln.php?osvdb_id=10216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17460
CVE ID: CVE-2004-2168 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: BaSoMail 1.24 allows remote attackers to cause a denial of service (CPU consumption) via multiple connections to TCP port (1) 25 (SMTP) or (2) 110 (POP3). Additional Analyst Notes: - CVE Program Container: References: - http://www.secunia.com/advisories/10761/ - http://securitytracker.com/id?1008912 - http://www.osvdb.org/3789 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15002 - http://members.lycos.co.uk/r34ct/main/Baso_mail/Baso_1.24.txt
CVE ID: CVE-2004-2169 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Application Access Server (A-A-S) 1.0.37 and earlier allows remote authenticated users to cause a denial of service (application crash) via a long file request. Additional Analyst Notes: - CVE Program Container: References: - http://members.lycos.co.uk/r34ct/main/A-A-S/AAS1_0_3.TXT - http://www.secunia.com/advisories/10762/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/15003
CVE ID: CVE-2004-2170 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in sample_showcode.html in Caravan 2.00/03d and earlier allows remote attackers to read arbitrary files via the fname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://members.lycos.co.uk/r34ct/main/Caravan/Caravan.txt - http://www.secunia.com/advisories/10763/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/15004 - http://www.securityfocus.com/bid/9555 - http://www.osvdb.org/3787 - http://securitytracker.com/id?1008913
CVE ID: CVE-2004-2171 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cherokee before 0.4.8 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting error page. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14936 - http://www.securityfocus.com/bid/9496 - http://secunia.com/advisories/10701/ - http://www.osvdb.org/3707
CVE ID: CVE-2004-2172 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/354288 - http://www.securityfocus.com/bid/9669 - http://www.earlyimpact.com/productcart/support/updates/ReadMe_ProductCart_Security_Patch_013004.txt - http://securitytracker.com/alerts/2004/Feb/1009085.html - http://archives.neohapsis.com/archives/fulldisclosure/2004-
- http://securitytracker.com/alerts/2004/Feb/1009085.html - http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0871.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15231 - http://www.s-quadra.com/advisories/Adv-20040216.txt - http://www.osvdb.org/3979 - http://archives.neohapsis.com/archives/bugtraq/2004-02/0503.html - http://secunia.com/advisories/10898
CVE ID: CVE-2004-2173 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in advSearch_h.asp in EarlyImpact ProductCart allows remote attackers to execute arbitrary SQL commands via the priceUntil parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/354288 - http://www.securityfocus.com/bid/9669 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15233 - http://www.earlyimpact.com/productcart/support/updates/ReadMe_ProductCart_Security_Patch_013004.txt - http://securitytracker.com/alerts/2004/Feb/1009085.htm
rt/support/updates/ReadMe_ProductCart_Security_Patch_013004.txt - http://securitytracker.com/alerts/2004/Feb/1009085.html - http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0871.html - http://www.osvdb.org/3981 - http://www.s-quadra.com/advisories/Adv-20040216.txt - http://archives.neohapsis.com/archives/bugtraq/2004-02/0503.html - http://secunia.com/advisories/10898
CVE ID: CVE-2004-2174 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Custva.asp in EarlyImpact ProductCart allows remote attackers to inject arbitrary Javascript via the redirectUrl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9669 - http://www.osvdb.org/3980 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15234 - http://www.earlyimpact.com/productcart/support/updates/ReadMe_ProductCart_Security_Patch_013004.txt - http://securitytracker.com/alerts/2004/Feb/1009085.html - http://arc
ates/ReadMe_ProductCart_Security_Patch_013004.txt - http://securitytracker.com/alerts/2004/Feb/1009085.html - http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0871.html - http://www.s-quadra.com/advisories/Adv-20040216.txt - http://archives.neohapsis.com/archives/bugtraq/2004-02/0503.html - http://secunia.com/advisories/10898
CVE ID: CVE-2004-2175 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands via the (1) product parameter to showproduct.php or (2) cat parameter to showcat.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9574 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15035 - http://secunia.com/advisories/10786/ - http://www.zone-h.org/en/advisories/read/id=3864/ - http://www.securityfocus.com/archive/1/352598
CVE ID: CVE-2004-2176 State: PUBLISHED Published: 2005-07-10T04:00:00Z Last Updated: 2024-09-16T23:15:40.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Connection Firewall (ICF) in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which allows local users to use sessmgr.exe to create a local listening port that bypasses the ICF access controls. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11410 - http://www.securityfocus.com/archive/1/378508
CVE ID: CVE-2004-2177 State: PUBLISHED Published: 2005-07-10T04:00:00Z Last Updated: 2024-09-16T18:03:23.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11428 - http://sourceforge.net/project/shownotes.php?release_id=273104 - http://www.maxpatrol.com/advdetails.asp?id=11
CVE ID: CVE-2004-2178 State: PUBLISHED Published: 2005-07-10T04:00:00Z Last Updated: 2024-09-16T19:01:09.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11428 - http://sourceforge.net/project/shownotes.php?release_id=273104 - http://www.maxpatrol.com/advdetails.asp?id=11
CVE ID: CVE-2004-2179 State: PUBLISHED Published: 2005-07-10T04:00:00Z Last Updated: 2024-09-16T19:19:34.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: asycpict.dll, as used in Microsoft products such as Front Page 97 and 98, allows remote attackers to cause a denial of service (hang) via a JPEG image with maximum height and width values. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/378619 - http://www.securityfocus.com/archive/1/378431 - http://www.securityfocus.com/bid/11412
CVE ID: CVE-2004-2180 State: PUBLISHED Published: 2005-07-10T04:00:00Z Last Updated: 2024-09-16T22:24:59.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WowBB Forum 1.61 allow remote attackers to inject arbitrary web script or HTML via the (1) country parameter to view_user.php, (2) show parameter to view_forum.php, (3) letter parameter to view_user.php, (4) highlight parameter to view_topic.php, (5) show parameter to index.php, (6) q parameter to search.php, (7) Referer header to admin.php, or the (8) user_email parameter to login.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.maxpatrol.
ser_email parameter to login.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.maxpatrol.com/advdetails.asp?id=7 - http://www.securityfocus.com/bid/11429
CVE ID: CVE-2004-2181 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in WowBB Forum 1.61 allow remote attackers to execute arbitrary SQL commands via the (1) sort_by or (2) page parameters to view_user.php, or the (3) forum_id parameter to view_topic.php. NOTE: the sort_by vector was later reported to be present in WowBB 1.65. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/11/wowbb-165-sql-vuln.html - http://www.maxpatrol.com/advdetails.asp?id=7 - http://www.securityfocus.com/bid/11429
CVE ID: CVE-2004-2182 State: PUBLISHED Published: 2005-07-10T04:00:00Z Last Updated: 2024-09-16T17:44:15.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user sessions by pre-setting the user session ID information used by the session server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11414 - http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html
CVE ID: CVE-2004-2183 State: PUBLISHED Published: 2005-07-10T04:00:00Z Last Updated: 2024-09-16T17:48:56.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in WeHelpBUS 0.1 allows remote attackers to execute arbitrary shell commands via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11431 - http://sourceforge.net/project/shownotes.php?release_id=275295
CVE ID: CVE-2004-2184 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Digicraft Yak! server 2.0 through 2.1.2 allows remote attackers to read or write arbitrary files via "../" or "..\" sequences in commands such as (1) dir or (2) put. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17740 - http://marc.info/?l=full-disclosure&m=109788315103778&w=2 - http://securitytracker.com/id?1011708 - http://secunia.com/advisories/12849 - http://aluigi.altervista.org/adv/yak-adv.txt - http://www.osvdb.o
com/id?1011708 - http://secunia.com/advisories/12849 - http://aluigi.altervista.org/adv/yak-adv.txt - http://www.osvdb.org/10763 - http://www.securityfocus.com/bid/11433 - http://www.securityfocus.com/archive/1/378533
CVE ID: CVE-2004-2185 State: PUBLISHED Published: 2005-07-10T04:00:00Z Last Updated: 2024-09-16T17:09:05.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.5 allow remote attackers to execute arbitrary scripts and/or SQL queries via (1) the UnicodeConverter extension, (2) raw page views, (3) SpecialIpblocklist, (4) SpecialEmailuser, (5) SpecialMaintenance, and (6) ImagePage. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=275099 - http://www.securityfocus.com/bid/11416
CVE ID: CVE-2004-2186 State: PUBLISHED Published: 2005-07-10T04:00:00Z Last Updated: 2024-09-17T02:01:46.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in MediaWiki 1.3.5 allows remote attackers to execute arbitrary SQL commands via SpecialMaintenance. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=275099 - http://www.securityfocus.com/bid/11416
CVE ID: CVE-2004-2187 State: PUBLISHED Published: 2005-07-10T04:00:00Z Last Updated: 2024-09-16T19:56:51.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in ImagePage for MediaWiki 1.3.5, related to "filename validation," has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=275099 - http://www.securityfocus.com/bid/11416
CVE ID: CVE-2004-2188 State: PUBLISHED Published: 2005-07-10T04:00:00Z Last Updated: 2024-09-16T18:13:21.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DMXReady Site Chassis Manager allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.maxpatrol.com/mp_advisory.asp - http://www.maxpatrol.com/advdetails.asp?id=10 - http://www.securityfocus.com/bid/11434
CVE ID: CVE-2004-2189 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in DMXReady Site Chassis Manager allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11434 - http://www.maxpatrol.com/mp_advisory.asp
CVE ID: CVE-2004-2190 State: PUBLISHED Published: 2005-07-10T04:00:00Z Last Updated: 2024-09-17T02:22:05.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Unzoo 4.4-2 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-10/0466.html - http://www.securityfocus.com/bid/11417 - http://securitytracker.com/id?1011673 - http://secunia.com/advisories/12857
CVE ID: CVE-2004-2191 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ttt-webmaster.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) msg[0] or (2) siteurl parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/displayvuln.php?osvdb_id=10638 - http://securitytracker.com/id?1011609 - http://secunia.com/advisories/12785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17673 - http://www.securityfocus.com/bid/11358 - http://archives.neohapsis.com/
ange.xforce.ibmcloud.com/vulnerabilities/17673 - http://www.securityfocus.com/bid/11358 - http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0296.html
CVE ID: CVE-2004-2192 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tttadmin/settings.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the ttt_admin parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17676 - http://securitytracker.com/id?1011609 - http://secunia.com/advisories/12785 - http://www.osvdb.org/10639 - http://www.securityfocus.com/bid/11358 - http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0296.html