Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0895 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:28.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netcomm 1300NB DSL Modem allows remote attackers to cause a denial of service (device hang) via a large number of ping packets. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111177093020587&w=2 - http://www.securityfocus.com/bid/12901
CVE ID: CVE-2005-0896 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:28.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in review.php in phpMyDirectory 10.1.3-rel allow remote attackers to inject arbitrary web script or HTML via the (1) subcat, (2) page, or (3) subsubcat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12900 - http://marc.info/?l=bugtraq&m=111176904423360&w=2 - http://secunia.com/advisories/14692
CVE ID: CVE-2005-0897 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:28.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in catalog.php in E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary PHP code by modifying the menu and main parameters to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111186424600509&w=2 - http://www.securityfocus.com/bid/12910
CVE ID: CVE-2005-0898 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in downloadform.php in E-Store Kit-2 PayPal Edition allows remote attackers to inject arbitrary web script or HTML via the txn_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111186424600509&w=2 - http://www.securityfocus.com/bid/12909
CVE ID: CVE-2005-0899 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: AS/400 running OS400 5.2 installs and enables LDAP by default, which allows remote authenticated users to obtain OS/400 user profiles by performing a search. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111186209318029&w=2
CVE ID: CVE-2005-0900 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to obtain sensitive information via an invalid (1) file or (2) category parameter, which reveal the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://nukebookmarks.sourceforge.net/ - http://zone-h.org/advisories/read/id=7356 - http://marc.info/?l=bugtraq&m=111186145609320&w=2
CVE ID: CVE-2005-0901 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in NukeBookmarks 0.6 for PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via the (1) catname, (2) markname, (3) comment, or (4) category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://nukebookmarks.sourceforge.net/ - http://zone-h.org/advisories/read/id=7356 - http://marc.info/?l=bugtraq&m=111186145609320&w=2
CVE ID: CVE-2005-0902 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:28.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://nukebookmarks.sourceforge.net/ - http://zone-h.org/advisories/read/id=7356 - http://marc.info/?l=bugtraq&m=111186145609320&w=2
CVE ID: CVE-2005-0903 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in QuickTime PictureViewer 6.5.1 allows remote attackers to cause a denial of service (application crash) via a JPEG file with crafted Huffman Table (marker DHT) data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12905 - http://marc.info/?l=bugtraq&m=111186277521713&w=2
CVE ID: CVE-2005-0904 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:28.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote attackers to shut down the system by executing TSShutdn.exe. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19819 - http://securitytracker.com/id?1013552 - http://support.microsoft.com/kb/889323
CVE ID: CVE-2005-0905 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:28.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maxthon 1.2.0 allows remote malicious web sites to obtain potentially sensitive data from the search bar via the m2_search_text property. Additional Analyst Notes: - CVE Program Container: References: - http://forum.maxthon.com/forum/index.php?showtopic=18207 - http://www.raffon.net/advisories/maxthon/searchbarid.html - http://www.securityfocus.com/bid/12898 - http://marc.info/?l=full-disclosure&m=111175236620942&w=2 - http://secunia.com/advisories/14712
CVE ID: CVE-2005-0906 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a player logging function in the Tincat network library 2.x before 2.0.28, as used in games such as Sacred and The Settlers: Heritage of Kings, allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14762 - http://www.securityfocus.com/archive/1/394404 - http://secunia.com/advisories/14767 - http://www.securityfocus.com/bid/12912 - http://aluigi.altervista.org/adv/tincat2bof-adv.txt
CVE ID: CVE-2005-0907 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to category.php, (2) the id parameter to item.php, (3) the lang parameter to index.php, (4) the searchQuery parameter to search_result.php, (5) or the searchTopCategoryID parameter to search_result.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/394406/2005-03-26/2005-04-01/2 - http://securitytracker.com/id?1013565
CVE ID: CVE-2005-0908 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter to index.php or (2) the searchTopCategoryID parameter to search_result.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/394406/2005-03-26/2005-04-01/2 - http://securitytracker.com/id?1013565
CVE ID: CVE-2005-0909 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:28.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in shoutact.php for TKai's Shoutbox allows remote attackers to execute arbitrary PHP code via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=111202260908735&w=2 - http://www.securityfocus.com/bid/12914 - http://seclists.org/lists/fulldisclosure/2005/Mar/0900.html
CVE ID: CVE-2005-0910 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in exoops allow remote attackers to inject arbitrary web script or HTML via (1) the sortdays parameter to viewforum.php or (2) the viewcat parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013566
CVE ID: CVE-2005-0911 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in exoops may allow remote attackers to execute arbitrary SQL commands via (1) the viewcat parameter to index.php or (2) the artid parameter in the viewarticle action for index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013566
CVE ID: CVE-2005-0912 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerabilities in deplate before 0.7.2 have unknown impact, possibly involving elements.rb. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013555 - http://sourceforge.net/project/shownotes.php?release_id=315034
CVE ID: CVE-2005-0913 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:28.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the regex_replace modifier (modifier.regex_replace.php) in Smarty before 2.6.8 allows attackers to execute arbitrary PHP code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14729/ - http://www.securityfocus.com/bid/12941 - http://news.php.net/php.smarty.dev/2673 - http://security.gentoo.org/glsa/glsa-200503-35.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/19880 - http://securitytracker.com/id?1013556
CVE ID: CVE-2005-0914 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CPG Dragonfly 9.0.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) the profile parameter to index.php or (2) the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013573 - http://security.talte.net/content/view/252/46/
CVE ID: CVE-2005-0915 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webmasters-Debutants WD Guestbook 2.8 allows remote attackers to bypass authentication and perform certain administrator actions via a direct HTTP POST request to (1) ajout_admin2.php or (2) suppr.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013570
CVE ID: CVE-2005-0916 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:28.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: AIO in the Linux kernel 2.6.11 on the PPC64 or IA64 architectures with CONFIG_HUGETLB_PAGE enabled allows local users to cause a denial of service (system panic) via a process that executes the io_queue_init function but exits without running io_queue_release, which causes exit_aio and is_hugepage_only_range to fail. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_50_kernel.html - http://groups-beta.google.com/group/linux.kernel/browse_thread/thread/13b43bd5
security/advisories/2005_50_kernel.html - http://groups-beta.google.com/group/linux.kernel/browse_thread/thread/13b43bd5783842f6/7ce3c5a514a497ab?q=io_queue_init&rnum=3#7ce3c5a514a497ab - http://linux.bkbits.net:8080/linux-2.6/cset%404248c8c0es30_4YVdwa6vteKi7h_nw - http://www.securityfocus.com/bid/12987
CVE ID: CVE-2005-0917 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index_header.php for EncapsBB 0.3.2_fixed, and possibly other versions, allows remote attackers to execute arbitrary PHP code via the root parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013569 - http://www.osvdb.org/15078 - http://secunia.com/advisories/14761
CVE ID: CVE-2005-0918 State: PUBLISHED Published: 2005-05-05T04:00:00 Last Updated: 2024-08-07T21:28:29.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops loading, which indicates whether the file exists or not. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013890 - http://www.adobe.com/support/techdocs/323585.html - http://secunia.com/advis
: - http://securitytracker.com/id?1013890 - http://www.adobe.com/support/techdocs/323585.html - http://secunia.com/advisories/15255 - http://www.hyperdose.com/advisories/H2005-07.txt
CVE ID: CVE-2005-0919 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:28.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adventia Chat 3.1 and Server Pro 3.0 allows remote attackers to inject arbitrary web script or HTML into the chat space, which leaves other users vulnerable to cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12927 - http://www.securityfocus.com/bid/12940 - http://exploitlabs.com/files/advisories/EXPL-A-2005-003-adventiachat.txt - http://securitytracker.com/id?1013588 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21317 - http://marc.i
txt - http://securitytracker.com/id?1013588 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21317 - http://marc.info/?l=full-disclosure&m=111211930330410&w=2 - http://www.osvdb.org/15156
CVE ID: CVE-2005-0920 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Bugtracker.NET 2.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12925 - http://sourceforge.net/project/shownotes.php?release_id=315830
CVE ID: CVE-2005-0921 State: PUBLISHED Published: 2005-03-29T05:00:00Z Last Updated: 2024-09-17T04:15:15.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/kb/896093 - http://www.securityfocus.com/bid/12913
CVE ID: CVE-2005-0922 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (system hang or crash) by triggering a scan of a certain file type. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12923 - http://securityresponse.symantec.com/avcenter/security/Content/2005.03.28.html - http://securitytracker.com/id?1013586 - http://www.kb.cert.org/vul
antec.com/avcenter/security/Content/2005.03.28.html - http://securitytracker.com/id?1013586 - http://www.kb.cert.org/vuls/id/146020 - http://securitytracker.com/id?1013587 - http://securitytracker.com/id?1013585 - http://secunia.com/advisories/14741
CVE ID: CVE-2005-0923 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (CPU consumption and system crash) by renaming a file on a network share. Additional Analyst Notes: - CVE Program Container: References: - http://securityresponse.symantec.com/avcenter/security/Content/2005.03.28.html - http://securitytracker.com/id?1013586 - http://www.kb.cert.org/vuls/id/713620 - http://securitytrack
t/2005.03.28.html - http://securitytracker.com/id?1013586 - http://www.kb.cert.org/vuls/id/713620 - http://securitytracker.com/id?1013587 - http://www.securityfocus.com/bid/12924 - http://securitytracker.com/id?1013585 - http://secunia.com/advisories/14741
CVE ID: CVE-2005-0924 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Adventia E-Data 2.0 allows remote attackers to inject arbitrary web script or HTML via a query keyword. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14739 - http://marc.info/?l=full-disclosure&m=111211945505635&w=2 - http://www.securityfocus.com/bid/12927 - http://securitytracker.com/id?1013589 - http://exploitlabs.com/files/advisories/EXPL-A-2005-004-edata.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/19889
CVE ID: CVE-2005-0925 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.asp for Ublog Reload 1.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013603 - http://www.securityfocus.com/bid/12931 - http://www.persianhacker.net/news/news-2945.html - http://www.osvdb.org/15121 - http://marc.info/?l=bugtraq&m=111214393101387&w=2 - http://secunia.com/advisories/14725
CVE ID: CVE-2005-0926 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Sylpheed before 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attachments with MIME-encoded file names. Additional Analyst Notes: - CVE Program Container: References: - http://sylpheed.good-day.net/changelog.html.en
CVE ID: CVE-2005-0927 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharacters or .. sequences. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14716 - http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=195 - http://sourceforge.net/project/shownotes.php?release_id=316038
CVE ID: CVE-2005-0928 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 5.x allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) password, (3) ppuser, (4) sort, or (5) si parameters to showgallery.php, the (6) ppuser, (7) sort, or (8) si parameters to showmembers.php, or (9) the photo parameter to slideshow.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15098 - http://secunia.com/advisories/14742 - http://marc.info/?l=bugtraq&m=111205342909640&w=2 - htt
tp://www.osvdb.org/15098 - http://secunia.com/advisories/14742 - http://marc.info/?l=bugtraq&m=111205342909640&w=2 - http://www.osvdb.org/15097 - http://www.osvdb.org/15096 - http://securitytracker.com/id?1013581
CVE ID: CVE-2005-0929 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:28.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PhotoPost PHP Pro 5.x may allow remote attackers to execute arbitrary SQL commands via (1) the sl parameter to showmembers.php or (2) the photo parameter to showphoto.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14742 - http://www.osvdb.org/15100 - http://marc.info/?l=bugtraq&m=111205342909640&w=2 - http://www.osvdb.org/15099 - http://marc.info/?l=bugtraq&m=111213719017716&w=2 - http://securitytracker.com/id?1013581
CVE ID: CVE-2005-0930 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in message.php in Chatness 2.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the user field or (2) the message parameter to message.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.persianhacker.net/news/news-2946.html - http://www.securityfocus.com/archive/1/394526 - http://www.securityfocus.com/bid/12929 - http://securitytracker.com/id?1013604
CVE ID: CVE-2005-0931 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in The Includer 1.0 and 1.1 allows remote attackers to execute arbitrary PHP code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12926
CVE ID: CVE-2005-0932 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpCOIN 1.2.1b and earlier allow remote attackers to execute arbitrary SQL commands (1) via the search engine, (2) the username or email fields in the "forgotten password" feature, or (3) the domain name in a package order. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12917 - http://www.gulftech.org/?node=research&article_id=00065-03292005
CVE ID: CVE-2005-0933 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in auxpage.php for phpCOIN 1.2.1b and earlier allows remote attackers to read arbitrary files via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12917 - http://www.gulftech.org/?node=research&article_id=00065-03292005
CVE ID: CVE-2005-0934 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WackoWiki R4 allow remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14720 - http://wackowiki.com/WackoDownload/InEnglish#h4828-4