Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-2262 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to execute arbitrary code by uploading a PHP file via the upload parameter to images.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1012657 - https://www.exploit-db.com/exploits/704 - http://e107.org/comment.php?comment.news.672 - http://www.securityfocus.com/bid/12111 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18670 - http://secunia.com/advisories
securityfocus.com/bid/12111 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18670 - http://secunia.com/advisories/13657 - http://www.osvdb.org/12586
CVE ID: CVE-2004-2263 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the valid function in fr_left.php in PlaySMS 0.7 and earlier allows remote attackers to modify SQL statements via the vc2 cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17031 - http://www.securiteam.com/unixfocus/5UP0F2ADPS.html - http://www.osvdb.org/8984 - http://www.securityfocus.com/bid/10970 - http://sourceforge.net/project/shownotes.php?release_id=254915 - http://securitytracker.com/id?1010984
CVE ID: CVE-2004-2264 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string bug in the open_altfile function in filename.c for GNU less 382, 381, and 358 might allow local users to cause a denial of service or possibly execute arbitrary code via format strings in the LESSOPEN environment variable. NOTE: since less is not setuid or setgid, then this is not a vulnerability unless there are plausible scenarios under which privilege boundaries could be crossed Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/9014 - http://securitytracker.com/id?1010988 -
alyst Notes: - CVE Program Container: References: - http://www.osvdb.org/9014 - http://securitytracker.com/id?1010988 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17032 - http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0794.html - http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0811.html
CVE ID: CVE-2004-2265 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15492 - http://www.securityfocus.com/bid/9857
CVE ID: CVE-2004-2266 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Ansel 2.1 and earlier allows remote attackers to modify SQL statements via the image parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11824 - http://www.osvdb.org/12236 - http://securitytracker.com/id?1012434 - http://secunia.com/secunia_research/2004-17/advisory/ - http://secunia.com/advisories/12856 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18373
CVE ID: CVE-2004-2267 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Ansel 2.1 and earlier allows remote attackers to inject arbitrary HTML or web script via the album name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11824 - http://securitytracker.com/id?1012434 - http://www.osvdb.org/12237 - http://secunia.com/secunia_research/2004-17/advisory/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18374 - http://secunia.com/advisories/12856
CVE ID: CVE-2004-2268 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: PimenGest2 before 1.1.1 allows remote attackers to obtain the database password via debug information in rowLatex.inc.php. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.pimentech.net/src/pimengest2/debian/changelog - http://www.osvdb.org/6324 - http://securitytracker.com/id?1010257 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16234 - http://www.securityfocus.com/bid/10408
CVE ID: CVE-2004-2269 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in pads.c in Passive Asset Detection System (Pads) might allow local users to execute arbitrary code via a long report file name argument. NOTE: since Pads is not normally installed setuid, this may not be a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0834.html - http://www.osvdb.org/9067 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17038
CVE ID: CVE-2004-2270 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in IBM Parallel Environment (PE) 3.2 and 4.1 allows attackers to execute arbitrary commands as root via unknown vectors in the sample code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16093 - http://www.osvdb.org/6008 - https://techsupport.services.ibm.com/server/pseries.subscriptionSvcs?mode=18&ID=312 - http://www.securityfocus.com/bid/10310 - http://secunia.com/advisories/11580 - http://securitytracker.com/id?1010109
CVE ID: CVE-2004-2271 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/11530 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17978 - http://www.securiteam.com/exploits/6X00B1PBPC.html - http://www.securityfocus.com/bid/11620 - http://secunia.com/advisories/13114 - http://sourceforge.net/project/shownotes.php?release_id=241158 - http://securitytracker.com/id?1012106 - http://archive
http://sourceforge.net/project/shownotes.php?release_id=241158 - http://securitytracker.com/id?1012106 - http://archives.neohapsis.com/archives/fulldisclosure/2004-11/0208.html
CVE ID: CVE-2004-2272 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the sockFinger_DataArrival function in efFingerD 0.2.12 allows remote attackers to cause a denial of service (daemon crash) via a long finger command. Additional Analyst Notes: - CVE Program Container: References: - http://members.lycos.co.uk/r34ct/main/efFingerD.txt - http://www.osvdb.org/5991 - http://secunia.com/advisories/11573 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16097 - http://securitytracker.com/id?1010094
CVE ID: CVE-2004-2273 State: PUBLISHED Published: 2005-07-19T04:00:00Z Last Updated: 2024-09-16T17:14:35.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: efFingerD 0.2.12 allows remote attackers to cause a denial of service (daemon crash) via a packet with a single byte, which triggers a "Wrong protocol or connection state" error. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5992 - http://secunia.com/advisories/11573
CVE ID: CVE-2004-2274 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Jigsaw before 2.2.4 has unknown impact and attack vectors, possibly related to the parsing of the URI. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1009169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15298 - http://www.w3.org/Jigsaw/RelNotes.html#2.2.4 - http://www.securityfocus.com/bid/9711 - http://www.osvdb.org/4014 - http://secunia.com/advisories/10975
CVE ID: CVE-2004-2275 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10626 - http://www.zone-h.org/advisories/read/id=4904 - http://secunia.com/advisories/11972 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16540 - http://www.osvdb.org/7461 - http://www.securiteam.com/exploits/5UP0715FPC.html
CVE ID: CVE-2004-2276 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: F-Secure Anti-Virus 5.41 and 5.42 on Windows, Client Security 5.50 and 5.52, 4.60 for Samba Servers, and 4.52 and earlier for Linux does not properly detect certain viruses in a PKZip archive, which allows viruses such as Sober.D and Sober.G to bypass initial detection. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11699 - http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-linux-hotfixes.shtml - http://support.f-secure.de/ger/home/downloads/hotfixes/av5-hotfixes.sht
ate/downloads/hotfixes/av-linux-hotfixes.shtml - http://support.f-secure.de/ger/home/downloads/hotfixes/av5-hotfixes.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/16243 - http://www.osvdb.org/6409
CVE ID: CVE-2004-2277 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in aGSM Half-Life client allows remote Half-Life servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server response. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12334 - http://securitytracker.com/id?1010989 - http://www.osvdb.org/9072 - http://www.securityfocus.com/bid/10989 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17046 - http://www.security.nnov.ru/docs6620.html
CVE ID: CVE-2004-2278 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown cross-site scripting (XSS) vulnerability in the web GUI in vHost before 3.10r1 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15446 - http://secunia.com/advisories/11113 - http://securitytracker.com/id?1009404 - http://chaogic.com/vhost/ChangeLog.txt - http://www.osvdb.org/4207
CVE ID: CVE-2004-2279 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Invision Power Board 1.3 Final allows remote attackers to execute arbitrary script as other users via the pop parameter in a chat action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15448 - http://archives.neohapsis.com/archives/bugtraq/2004-03/0082.html
CVE ID: CVE-2004-2280 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial of service (crash) via unknown vectors related to Java applets, as identified by KSPR62F4KN. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?rs=475&context=SSKTWP&q1=Java&uid=swg21173910&loc=en_US&cs=utf-8&lang=en - http://www.securityfocus.com/bid/10704 - http://secunia.com/advisories/12046 - http://www.osvdb.org/8418
CVE ID: CVE-2004-2281 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5 have unknown impact and attack vectors, related to Java applets, as identified by (1) KSPR5YS6GR and (2) KSPR62F4D3. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/8416 - http://www.osvdb.org/8417 - http://www-1.ibm.com/support/docview.wss?rs=475&context=SSKTWP&q1=Java&uid=swg21173910&loc=en_US&cs=utf-8&lang=en - http://www.securityfocus.com/bid/10704 - http://secunia.com/advisories/12046
CVE ID: CVE-2004-2282 State: PUBLISHED Published: 2005-07-19T04:00:00Z Last Updated: 2024-09-17T01:26:51.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: DansGuardian before 2.7.7-2 allows remote attackers to bypass URL filters via a ".." in the request. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5950 - http://dansguardian.org/?page=history
CVE ID: CVE-2004-2283 State: PUBLISHED Published: 2005-07-19T04:00:00Z Last Updated: 2024-09-16T19:36:32.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in DansGuardian before 2.6.1-13 allows remote attackers to bypass URL filters via a crafted request that causes a page to be added to the clean page cache. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5951 - http://dansguardian.org/?page=history
CVE ID: CVE-2004-2284 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-08T01:22:13.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_list_from_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16549 - http://securitytracker.com/id?1010605 - http://openwebmail.org/openwebmail/download/cert/advisories/SA-04:04.txt - http://www.securityfocus.com/bid/10637 - http://secunia.com/advisories/12017 - http://www.osvdb.org/747
s/SA-04:04.txt - http://www.securityfocus.com/bid/10637 - http://secunia.com/advisories/12017 - http://www.osvdb.org/7474
CVE ID: CVE-2004-2285 State: REJECTED Published: 2005-08-04T04:00:00 Last Updated: 2005-08-10T09:00:00 Description: No description available.
CVE ID: CVE-2004-2286 State: PUBLISHED Published: 2005-08-04T04:00:00 Last Updated: 2024-08-08T01:22:13.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large multiplier, which may trigger a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16224 - http://www.securityfocus.com/bid/10380 - http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0878.html
CVE ID: CVE-2004-2287 State: PUBLISHED Published: 2005-08-04T04:00:00Z Last Updated: 2024-09-16T18:29:13.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arbitrary files via .. (dot dot) in the wdir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10381
CVE ID: CVE-2004-2288 State: PUBLISHED Published: 2005-08-04T04:00:00Z Last Updated: 2024-09-16T18:19:27.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote attackers to spoof parts of a website via the loc parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10362 - http://www.infosecurity.org.cn/article/hacker/exploit/16557.html
CVE ID: CVE-2004-2289 State: PUBLISHED Published: 2005-08-04T04:00:00 Last Updated: 2024-08-08T01:22:13.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value that is associated with an executable file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16171 - http://secunia.com/advisories/11633 - http://www.freewebs.com/roozbeh_afrasiabi/xploit/execute.htm - http://www.securityfocus.com/bid/10363 - http://www.osvdb.org/6221 - http://archives
zbeh_afrasiabi/xploit/execute.htm - http://www.securityfocus.com/bid/10363 - http://www.osvdb.org/6221 - http://archives.neohapsis.com/archives/bugtraq/2004-05/0168.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-015
CVE ID: CVE-2004-2290 State: PUBLISHED Published: 2005-08-04T04:00:00 Last Updated: 2024-08-08T01:22:13.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP Explorer allows attackers to execute arbitrary code via a HTML and script in a self-executing folder that references an executable file within the folder, which is automatically executed when a user accesses the folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9487 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14924 - http://secunia.com/advisories/10708 - http://archives.neohapsis.com/archives/bugtraq/2004-01/0267.html - http://securitytrack
//secunia.com/advisories/10708 - http://archives.neohapsis.com/archives/bugtraq/2004-01/0267.html - http://securitytracker.com/id?1008843 - http://www.osvdb.org/3711
CVE ID: CVE-2004-2291 State: PUBLISHED Published: 2005-08-04T04:00:00Z Last Updated: 2024-09-16T23:41:08.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Helper objects and a shortcut (link) to execute the target script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9335 - http://www.securityfocus.com/archive/1/348688
CVE ID: CVE-2004-2292 State: PUBLISHED Published: 2005-08-04T04:00:00 Last Updated: 2024-08-08T01:22:13.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Alt-N MDaemon 7.0.1 allows remote attackers to cause a denial of service (application crash) via a long STATUS command to the IMAP server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10366 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16118 - http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0527.html
CVE ID: CVE-2004-2293 State: PUBLISHED Published: 2005-08-04T04:00:00 Last Updated: 2024-08-08T01:22:13.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.0 to 7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) eid parameter or (2) query parameter to the Encyclopedia module, (3) preview_review function in the Reviews module as demonstrated by the url, cover, rlanguage, and hits parameters, or (4) savecomment function in the Reviews module, as demonstrated using the uname parameter. NOTE: the Faq/categories and Encyclopedia/ltr issues are already covered by CVE-2005-1023. Additional Analy
e parameter. NOTE: the Faq/categories and Encyclopedia/ltr issues are already covered by CVE-2005-1023. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16406 - http://www.osvdb.org/6999 - http://www.osvdb.org/6997 - http://secunia.com/advisories/11852 - http://www.securityfocus.com/archive/1/365865 - http://www.securityfocus.com/bid/10524 - http://www.osvdb.org/6998
CVE ID: CVE-2004-2294 State: PUBLISHED Published: 2005-08-04T04:00:00Z Last Updated: 2024-09-17T00:41:32.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canonicalize-before-filter error in the send_review function in the Reviews module for PHP-Nuke 6.0 to 7.3 allows remote attackers to inject arbitrary web script or HTML via hex-encoded XSS sequences in the text parameter, which is checked for dangerous sequences before it is canonicalized, leading to a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/6999 - http://secunia.com/advisories/11852 - http://www.securityfocus.com/archive/1/365865 - http:
http://www.osvdb.org/6999 - http://secunia.com/advisories/11852 - http://www.securityfocus.com/archive/1/365865 - http://www.securityfocus.com/bid/10524
CVE ID: CVE-2004-2295 State: PUBLISHED Published: 2005-08-04T04:00:00 Last Updated: 2024-08-08T01:22:13.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to execute arbitrary SQL commands via the order parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0310.html - http://www.osvdb.org/7000 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16407 - http://secunia.com/advisories/11852 - http://www.securityfocus.com/archive/1/365865 - http://www.securityfocus.com/bid/10524
CVE ID: CVE-2004-2296 State: PUBLISHED Published: 2005-08-04T04:00:00 Last Updated: 2024-08-08T01:22:13.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The preview_review function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, allows remote attackers to obtain sensitive information via an invalid date parameter, which generates an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11852 - http://www.securityfocus.com/archive/1/365865 - http://www.securityfocus.com/bid/10524 - http://www.osvdb.org/7001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16408
CVE ID: CVE-2004-2297 State: PUBLISHED Published: 2005-08-04T04:00:00 Last Updated: 2024-08-08T01:22:13.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large, out-of-range score parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/7002 - http://www.osvdb.org/7003 - http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0310.html - http://secunia.com/advisories/11852 - http://www.securityfocus.com/archive/1/365865 - http://www.securityfocus.com/bid/10524 - https://exchange.xforce.ibmcloud.com/vulner
ecurityfocus.com/archive/1/365865 - http://www.securityfocus.com/bid/10524 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16409