Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-1553 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via sniffing. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20538 - http://www.osvdb.org/16341 - http://www.esqo.com/research/advisories/2005/100505-1.txt - http://marc.info/?l=bugtraq&m=111574131105737&w=2
CVE ID: CVE-2005-1554 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_user.php in WowBB 1.6, 1.61, and 1.62 allows remote attackers to execute arbitrary SQL commands via the sort_by parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20565 - http://www.securityfocus.com/bid/13569 - http://www.osvdb.org/16543 - http://secunia.com/advisories/12843 - http://marc.info/?l=bugtraq&m=111575905112831&w=2
CVE ID: CVE-2005-1555 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the JRun Web Server in ColdFusion MX 7.0 allows remote attackers to inject arbitrary script or HTML via the URL, which is not properly quoted in the resulting default 404 error page. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111575500403231&w=2 - http://www.macromedia.com/devnet/security/security_zone/mpsb05-03.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/20550
CVE ID: CVE-2005-1556 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gamespy cd-key validation system allows remote attackers to cause a denial of service (cd-key already in use) by capturing and replaying a cd-key authorization session. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20417 - http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0065.html - http://marc.info/?l=bugtraq&m=111575820116969&w=2 - http://aluigi.altervista.org/adv/gskeyinuse-adv.txt - http://secunia.com/advisories/15254
CVE ID: CVE-2005-1557 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebApp Guestbook PRO 3.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) content of a message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16349 - http://www.soulblack.com.ar/repo/papers/guesbookpro_advisory.txt - http://www.securityfocus.com/bid/13593 - http://securitytracker.com/id?1013940 - http://marc.info/?l=bugtraq&m=111585232810150&w=2 - http://secunia.com/advisories/15290
securitytracker.com/id?1013940 - http://marc.info/?l=bugtraq&m=111585232810150&w=2 - http://secunia.com/advisories/15290/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/20544
CVE ID: CVE-2005-1558 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web module in Neteyes Nexusway allows remote attackers to bypass authentication and gain administrator privileges by setting the cyclone500_auth cookie. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0225.html - http://secunia.com/advisories/15150 - http://marc.info/?l=bugtraq&m=111585017832066&w=2 - http://www.osvdb.org/16446 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20554
CVE ID: CVE-2005-1559 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via hex-encoded shell metacharacters in the ip parameter for (1) nslookup.cgi or (2) ping.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15150 - http://marc.info/?l=bugtraq&m=111585017832066&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20557 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033945.html - http://www.osvdb.org/16449 - http://www.osvdb.org/16448
CVE ID: CVE-2005-1560 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSH module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via shell metacharacters in arguments to certain commands, as demonstrated using ping and traceroute. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20555 - http://secunia.com/advisories/15150 - http://marc.info/?l=bugtraq&m=111585017832066&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033945.html - http://www.osvdb.org/16447
CVE ID: CVE-2005-1561 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in post.asp in MaxWebPortal 1.3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mod, (2) M, or (3) type parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111584883727605&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20560 - http://www.osvdb.org/16501 - http://www.hackerscenter.com/archive/view.asp?id=2542 - http://secunia.com/advisories/15329 - http://www.securityfocus
- http://www.hackerscenter.com/archive/view.asp?id=2542 - http://secunia.com/advisories/15329 - http://www.securityfocus.com/bid/13601
CVE ID: CVE-2005-1562 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MaxWebPortal 1.3.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) fpassword parameter to inc_functions.asp, (2) txtAddress, (3) message, or (4) subject parameter to post_info.asp, (5) andor parameter to search.asp, (6) verkey parameter to pop_profile.asp, or (7) Remove or (8) Delete parameter to pm_delete2.asp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111584883727605&w=2 - http://www.hackerscenter.c
s: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111584883727605&w=2 - http://www.hackerscenter.com/archive/view.asp?id=2542 - http://www.osvdb.org/16504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20562 - http://secunia.com/advisories/15329 - http://www.securityfocus.com/bid/13601 - http://www.osvdb.org/16506 - http://www.osvdb.org/16502 - http://www.osvdb.org/16503 - http://www.osvdb.org/16510
CVE ID: CVE-2005-1563 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 displays a different error message depending on whether a product exists or not, which allows remote attackers to determine hidden products. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=001040 - http://www.bugzilla.org/security/2.16.8/ - http://marc.info/?l=bugtraq&m=111592031902962&w=2 - http://www.vupen.com/english/advisories/2005/0533 - https://bugzilla.mozilla.org/show_bug.cgi?id=287109 - ht
02962&w=2 - http://www.vupen.com/english/advisories/2005/0533 - https://bugzilla.mozilla.org/show_bug.cgi?id=287109 - http://www.securityfocus.com/bid/13606 - http://secunia.com/advisories/15338 - http://www.osvdb.org/16425
CVE ID: CVE-2005-1564 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: post_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to "enter bugs into products that are closed for bug entry" by modifying the URL to specify the name of the product. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugzilla.org/security/2.16.8/ - http://marc.info/?l=bugtraq&m=111592031902962&w=2 - https://bugzilla.mozilla.org/show_bug.cgi?id=287109 - http://www.osvdb.org/16426 - http://secunia.com/advisories/15338 - https://exchange.xforce.ibmcloud.com/
cgi?id=287109 - http://www.osvdb.org/16426 - http://secunia.com/advisories/15338 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42797
CVE ID: CVE-2005-1565 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.17.1 through 2.18, 2.19.1, and 2.19.2, when a user is prompted to log in while attempting to view a chart, displays the password in the URL, which may allow local users to gain sensitive information from web logs or browser history. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=001040 - http://marc.info/?l=bugtraq&m=111592031902962&w=2 - http://www.vupen.com/english/advisories/2005/0533 - https://bugzilla.mozilla.org/show_bug.cgi?i
&m=111592031902962&w=2 - http://www.vupen.com/english/advisories/2005/0533 - https://bugzilla.mozilla.org/show_bug.cgi?id=287436 - http://secunia.com/advisories/15338 - http://www.osvdb.org/16427 - http://www.securityfocus.com/bid/13605
CVE ID: CVE-2005-1566 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acrowave AAP-3100AR wireless router allows remote attackers to bypass authentication by pressing CTRL-C at the username or password prompt in a telnet session, which causes the shell to crash and restart, then leave the user in the new shell. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111592452331677&w=2 - http://secunia.com/advisories/15343 - http://www.osvdb.org/16445
CVE ID: CVE-2005-1567 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to execute arbitrary SQL commands via the topic parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111592417803514&w=2
CVE ID: CVE-2005-1568 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to obtain sensitive information via an invalid topic parameter, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111592417803514&w=2
CVE ID: CVE-2005-1569 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DirectTopics 2.1 and 2.2 allows remote attackers to inject arbitrary web script via a javascript: URL in (1) a thread or (2) an IMG tag. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111592417803514&w=2
CVE ID: CVE-2005-1570 State: PUBLISHED Published: 2005-05-14T04:00:00Z Last Updated: 2024-09-17T00:05:36.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: forum.asp in bttlxeForum 2.0 allows remote attackers to obtain full path information via a certain hex-encoded argument to the page parameter, possibly due to a SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013934
CVE ID: CVE-2005-1571 State: PUBLISHED Published: 2005-05-14T04:00:00Z Last Updated: 2024-09-17T02:17:09.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in ShowOff! 1.5.4 allow remote attackers to read arbitrary files via ".." sequences in arguments to the (1) ShowAlbum, (2) ShowVideo, or (3) ShowGraphic scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16332 - http://secunia.com/advisories/15300
CVE ID: CVE-2005-1572 State: PUBLISHED Published: 2005-05-14T04:00:00Z Last Updated: 2024-09-16T19:40:37.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: ShowOff! 1.5.4 allows remote attackers to cause a denial of service (server crash) via a malformed request to port 8083. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15300 - http://www.osvdb.org/16333
CVE ID: CVE-2005-1573 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin_login.asp for ASP Virtual News Manager allows remote attackers to execute arbitrary SQL commands via the password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013933 - http://www.under9round.com/avn13.txt
CVE ID: CVE-2005-1574 State: PUBLISHED Published: 2005-05-14T04:00:00Z Last Updated: 2024-09-17T01:12:13.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows Media Player 9 and 10, in certain cases, allows content protected by Windows Media Digital Rights Management (WMDRM) to redirect the user to a web site to obtain a license, even when the "Acquire licenses automatically for protected content" setting is not enabled. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B892313
CVE ID: CVE-2005-1575 State: PUBLISHED Published: 2005-05-14T04:00:00Z Last Updated: 2024-09-16T21:57:20.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to hide the real file types of downloaded files via the Content-Type HTTP header and a filename containing whitespace, dots, or ASCII byte 160. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16431 - http://secunia.com/secunia_research/2004-11/advisory/ - http://secunia.com/advisories/12979
CVE ID: CVE-2005-1576 State: PUBLISHED Published: 2005-05-14T04:00:00Z Last Updated: 2024-09-16T18:14:17.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when "Save to Disk" is selected, which allows remote attackers to hide the real file types of downloaded files. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16432 - http://secunia.com/secunia_research/2004-11/advisory/ - http://secunia.com/advisories/12979
CVE ID: CVE-2005-1577 State: PUBLISHED Published: 2005-05-14T04:00:00Z Last Updated: 2024-09-16T18:38:38.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: APG Technology ClassMaster does not properly restrict access to sensitive folders, which allows remote attackers to access folders via a network share. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13604 - http://www.securiteam.com/windowsntfocus/5SP0D0AFPQ.html
CVE ID: CVE-2005-1578 State: PUBLISHED Published: 2005-05-14T04:00:00Z Last Updated: 2024-09-17T00:50:38.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: EnCase Forensic Edition 4.18a does not support Device Configuration Overlays (DCO), which allows attackers to hide information without detection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/104/398021 - http://secunia.com/advisories/15340
CVE ID: CVE-2005-1579 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime Player 7.0 on Mac OS X 10.4 allows remote attackers to obtain sensitive information via a .mov file with a Quartz Composer composition (.qtz) file that uses certain patches to read local information, then other patches to send the information to the attacker. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=301714 - http://www.vupen.com/english/advisories/2005/0531 - http://remahl.se/david/vuln/018 - http://www.securityfocus.com/bid/13603 - http://a
n.com/english/advisories/2005/0531 - http://remahl.se/david/vuln/018 - http://www.securityfocus.com/bid/13603 - http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0265.html - http://secunia.com/advisories/15307 - http://lists.apple.com/archives/security-announce/2005/May/msg00006.html - http://lists.apple.com/archives/quartzcomposer-dev/2005/May/msg00250.html - http://securitytracker.com/id?1013961 - http://www.osvdb.org/16376 - http://lists.apple.com/archives/quartzcomposer-dev/2005/May/msg00263.html
CVE ID: CVE-2005-1580 State: PUBLISHED Published: 2005-05-14T04:00:00Z Last Updated: 2024-09-16T22:35:17.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16334 - http://secunia.com/advisories/15312 - http://www.kernelpanik.org/docs/kernelpanik/bmachines.txt - http://www.securityfocus.com/bid/13600
CVE ID: CVE-2005-1581 State: PUBLISHED Published: 2005-05-14T04:00:00Z Last Updated: 2024-09-17T01:25:43.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Bug Report 1.0 allows remote attackers to inject arbitrary web script or HTML via various fields to bug_report.php, which are not filtered or quoted when processed by bug_list.php or admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013957
CVE ID: CVE-2005-1582 State: PUBLISHED Published: 2005-05-14T04:00:00Z Last Updated: 2024-09-17T01:26:00.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php for 1Two News 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) nom, (2) email, (3) siteweb, or (4) commentaire variables. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013960
CVE ID: CVE-2005-1583 State: PUBLISHED Published: 2005-05-14T04:00:00Z Last Updated: 2024-09-16T20:32:26.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: 1Two News 1.0 allows remote attackers to (1) delete images for new stories via a direct request to admin/delete.php or (2) upload arbitrary images via a direct request to admin/upload.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013960
CVE ID: CVE-2005-1584 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php for Quick.Forum 2.1.6 allows remote attackers to inject arbitrary web script or HTML via the topic field in a NewTopic action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13602 - http://secunia.com/advisories/15200 - http://www.osvdb.org/16327 - http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html
CVE ID: CVE-2005-1585 State: PUBLISHED Published: 2005-05-14T04:00:00Z Last Updated: 2024-09-16T18:39:07.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Quick.Forum 2.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) iCategory or (2) page parameter to index.php, or (3) iCategory parameter in the query string to the forum directory. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html - http://secunia.com/advisories/15200 - http://www.osvdb.org/16326
CVE ID: CVE-2005-1586 State: PUBLISHED Published: 2005-05-14T04:00:00Z Last Updated: 2024-09-16T22:09:46.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quick.Forum 2.1.6 stores potentially sensitive information such as usernames, banned IP addresses, censored words, and backups under the web document root, which allows remote attackers to obtain that information via a direct request to (1) db/users.txt, (2) db/banList.txt, (3) db/censureWords.txt, or (4) backup files. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html - http://secunia.com/advisories/15200 - http://www.osvdb.org/16328 -
om/2005/05/quickforum-topic-field-xss-and-page.html - http://secunia.com/advisories/15200 - http://www.osvdb.org/16328 - http://www.osvdb.org/16329
CVE ID: CVE-2005-1587 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:59:22.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to inject arbitrary web script or HTML via the sWord parameter. Additional Analyst Notes: - CVE Program Container: References: - http://opensolution.org/forum/?p=readTopic&nr=948 - http://www.osvdb.org/16330 - http://secunia.com/advisories/15297 - http://www.securityfocus.com/bid/13599 - http://lostmon.blogspot.com/2005/05/quickcart-sword-variable-xss-and.html
CVE ID: CVE-2005-1588 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:59:22.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to execute arbitrary SQL commands via the iCategory parameter. NOTE: the vendor has privately disputed this issue, saying that Quick.cart does not even use SQL and therefore can not be vulnerable to SQL injection Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2005/05/quickcart-sword-variable-xss-and.html - http://www.osvdb.org/16331
CVE ID: CVE-2005-1589 State: PUBLISHED Published: 2005-05-17T04:00:00 Last Updated: 2024-08-07T21:59:22.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pkt_ioctl function in the pktcdvd block device ioctl handler (pktcdvd.c) in Linux kernel 2.6.12-rc4 and earlier calls the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space and allows local users to cause a denial of service and possibly execute arbitrary code, a similar vulnerability to CVE-2005-1264. Additional Analyst Notes: - CVE Program Container: References: - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.1