Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-3019 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in vBulletin before 3.0.9 allow remote attackers to execute arbitrary SQL commands via the (1) request parameter to joinrequests.php, (2) limitnumber or (3) limitstart to user.php, (4) usertitle.php, or (5) usertools.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22323 - http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt - http://www.securityfocus.com/bid/14872 - http://marc.info/?l=bugtraq&m=112715150320
ories/20050917-vbulletin-3.0.8.txt - http://www.securityfocus.com/bid/14872 - http://marc.info/?l=bugtraq&m=112715150320677&w=2 - http://secunia.com/advisories/16873/
CVE ID: CVE-2005-3020 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter to css.php, (2) redirect parameter to index.php, (3) email parameter to user.php, (4) goto parameter to language.php, (5) orderby parameter to modlog.php, and the (6) hex, (7) rgb, or (8) expandset parameter to template.php. Additional Analyst Notes: - CVE Program Container: References: - http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt - https://exch
Notes: - CVE Program Container: References: - http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/22324 - http://www.securityfocus.com/bid/14874 - http://marc.info/?l=bugtraq&m=112715150320677&w=2 - http://secunia.com/advisories/16873/
CVE ID: CVE-2005-3021 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: image.php in vBulletin 3.0.9 and earlier allows remote attackers with access to the administrator panel to upload arbitrary files via the upload action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22325 - http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt - http://marc.info/?l=bugtraq&m=112715150320677&w=2 - http://secunia.com/advisories/16873/
CVE ID: CVE-2005-3022 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) announcement parameter to announcement.php, (2) userid parameter to user.php, (3) calendar parameter to admincalendar.php, (4) cronid parameter to cronlog.php, (5) usergroupid parameter to email.php, (6) help parameter to help.php, (7) rvt parameter to language.php, (8) keep parameter to phrase.php, or (9) updateprofilepic parameter to usertools.php. Additional Analyst Notes: - CVE Program
ep parameter to phrase.php, or (9) updateprofilepic parameter to usertools.php. Additional Analyst Notes: - CVE Program Container: References: - http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt - http://marc.info/?l=bugtraq&m=112715150320677&w=2
CVE ID: CVE-2005-3023 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via certain arguments to (1) announcement.php, (2) admincalendar.php, (3) bbcode.php, (4) cronadmin.php, (5) email.php, (6) faq.php, (7) forum.php, (8) image.php, (9) language.php, (10) ranks.php, (11) replacement.php, (12) replacement.php, (13) template.php, (14) template.php, (15) usergroup.php, or (16) usertitle.php. Additional Analyst Notes: - CVE Program Container: References: -
mplate.php, (15) usergroup.php, or (16) usertitle.php. Additional Analyst Notes: - CVE Program Container: References: - http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt - http://marc.info/?l=bugtraq&m=112715150320677&w=2
CVE ID: CVE-2005-3024 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) announcement parameter to announcement.php, the (2) thread[forumid] or (3) criteria parameters to thread.php, (4) userid parameter to user.php, the (5) calendarcustomfieldid, (6) calendarid, (7) moderatorid, (8) holidayid, (9) calendarmoderatorid, or (10) calendar[0] parameters to admincalendar.php, (11) the cronid parameter to cronlog.php, (12) user[usergroupid][0] parameter to email.php,
eters to admincalendar.php, (11) the cronid parameter to cronlog.php, (12) user[usergroupid][0] parameter to email.php, (13) help[0] parameter to help.php, the (14) limitnumber or (15) limitstart parameter to user.php, the (16) usertitleid or (17) ids parameters to usertitle.php, (18) rvt[0] parameter to language.php, (19) keep[0] parameter to phrase.php, (20) dostyleid parameter to template.php, (21) thread[forumid] parameter to thread.php, or (22) usertools.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112732980702939&w=2 - http://morph3us.org/advisories/20050917-vbulletin-3.0.7.txt
CVE ID: CVE-2005-3025 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the loc parameter to (1) modcp/index.php or (2) admincp/index.php, or the ip parameter to (3) modcp/user.php or (4) admincp/usertitle.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112732980702939&w=2 - http://morph3us.org/advisories/20050917-vbulletin-3.0.7.txt
CVE ID: CVE-2005-3026 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Alstrasoft Epay Pro 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the read parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112716394925851&w=2 - http://www.h4cky0u.org/advisories/HYA-2005-008-alstrasoft-epay-pro.txt - http://securityreason.com/securityalert/13 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22313 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-Sept
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/22313 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037225.html - http://marc.info/?l=bugtraq&m=112714879101323&w=2 - http://www.securityfocus.com/bid/14871
CVE ID: CVE-2005-3027 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sybari Antigen 8.0 SR2 does not properly filter SMTP messages, which allows remote attackers to bypass custom filter rules and send file attachments of arbitrary file types via a message with a subject of "Antigen forwarded attachment". Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22327 - http://securitytracker.com/id?1014934 - http://securityreason.com/securityalert/15 - http://www.securityfocus.com/bid/14875 - http://secunia.com/advisories/16759/ - http
curityreason.com/securityalert/15 - http://www.securityfocus.com/bid/14875 - http://secunia.com/advisories/16759/ - http://marc.info/?l=bugtraq&m=112714679622107&w=2
CVE ID: CVE-2005-3028 State: REJECTED Published: 2005-09-21T04:00:00 Last Updated: 2005-11-02T10:00:00 Description: No description available.
CVE ID: CVE-2005-3029 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0.383, and V3Net for Windows Server 6.0 build 6.0.0.383 allows remote attackers to execute arbitrary code via a long filname in an ACE archive. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2005-17/advisory/ - http://marc.info/?l=bugtraq&m=112680062609377&w=2 - http://info.ahnlab.com/english/advisory/01.html - http://www.securityfocus.com/bid/14844 - http://secunia.com/advisories
http://info.ahnlab.com/english/advisory/01.html - http://www.securityfocus.com/bid/14844 - http://secunia.com/advisories/15674/
CVE ID: CVE-2005-3030 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the archive decompression library in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0.383, and V3Net for Windows Server 6.0 build 6.0.0.383 allows remote attackers to write arbitrary files via a .. (dot dot) in the filename in a compressed archive. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2005-17/advisory/ - http://marc.info/?l=bugtraq&m=112680062609377&w=2 - http://www.securityfocus.com/bid/14848 - http://info.ahn
advisory/ - http://marc.info/?l=bugtraq&m=112680062609377&w=2 - http://www.securityfocus.com/bid/14848 - http://info.ahnlab.com/english/advisory/01.html - http://secunia.com/advisories/15674/
CVE ID: CVE-2005-3031 State: PUBLISHED Published: 2005-09-22T04:00:00Z Last Updated: 2024-09-17T04:28:49.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in vxFtpSrv 0.9.7 allows remote attackers to execute arbitrary code via a long USER name. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16837 - http://securitytracker.com/id?1014911 - http://www.airscanner.com/security/05081102_vxftpsrv.htm
CVE ID: CVE-2005-3032 State: PUBLISHED Published: 2005-09-22T04:00:00Z Last Updated: 2024-09-16T22:35:59.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in vxTftpSrv 1.7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a TFTP request with a long filename argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14842 - http://www.airscanner.com/security/05081203_vxtftpsrv.htm - http://securitytracker.com/id?1014912 - http://secunia.com/advisories/16840
CVE ID: CVE-2005-3033 State: PUBLISHED Published: 2005-09-22T04:00:00Z Last Updated: 2024-09-16T16:22:41.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in vxWeb 1.1.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.airscanner.com/security/05081101_vxweb.htm - http://securitytracker.com/id?1014910
CVE ID: CVE-2005-3034 State: PUBLISHED Published: 2005-09-22T04:00:00Z Last Updated: 2024-09-16T22:56:42.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Compuware DriverStudio Remote Control service (DSRsvc.exe) 2.7 and 3.0 beta 2 allows remote attackers to bypass authentication via a null session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14837 - http://secunia.com/advisories/16838 - http://www.xfocus.net/articles/200509/821.html - http://lists.seifried.org/pipermail/security/2005-September/009956.html
CVE ID: CVE-2005-3035 State: PUBLISHED Published: 2005-09-22T04:00:00Z Last Updated: 2024-09-16T17:03:12.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Compuware DriverStudio Remote Control service (DSRsvc.exe) 2.7 and 3.0 beta 2 allows remote attackers to cause a denial of service (reboot) via a UDP packet sent directly to port 9110. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16838 - http://www.securityfocus.com/bid/14838 - http://www.xfocus.net/articles/200509/821.html - http://lists.seifried.org/pipermail/security/2005-September/009956.html
CVE ID: CVE-2005-3036 State: PUBLISHED Published: 2005-09-22T04:00:00Z Last Updated: 2024-09-17T00:01:38.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Transfer Anywhere 3.01 stores sensitive password information in plaintext in the PASS value in the "File Transfer Anywhere" registry key, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014919
CVE ID: CVE-2005-3037 State: PUBLISHED Published: 2005-09-22T04:00:00 Last Updated: 2024-08-07T22:53:30.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Handy Address Book Server 1.1 allows remote attackers to inject arbitrary web script or HTML via the SEARCHTEXT parameter in a demos URL. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014901 - http://secubox.teria.org/index.php?menu=24&action=detail&aid=82 - http://secunia.com/advisories/16798 - http://www.securityfocus.com/bid/14818
CVE ID: CVE-2005-3038 State: PUBLISHED Published: 2005-09-22T04:00:00Z Last Updated: 2024-09-17T00:45:34.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hosting Controller 6.1 before Hotfix 2.4 allows remote attackers to list and read contents of arbitrary drives, related to "the PHP vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://hostingcontroller.com/english/logs/hotfixlogv61_2_4.html - http://secunia.com/advisories/16824 - http://www.securityfocus.com/bid/14840
CVE ID: CVE-2005-3039 State: PUBLISHED Published: 2005-09-22T04:00:00Z Last Updated: 2024-09-17T04:14:49.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in infopage.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idPage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014882 - http://www.securityfocus.com/bid/14803 - http://systemsecure.org/ssforum/viewtopic.php?t=219
CVE ID: CVE-2005-3040 State: PUBLISHED Published: 2005-09-22T04:00:00Z Last Updated: 2024-09-16T20:31:26.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web interface (ISALogin.dll) for TAC Vista 4.0, and possibly other versions before 4.3, allows remote attackers to read arbitrary files via ".." sequences in the Template parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014923 - http://www.osvdb.org/19479 - http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0469.html - http://www.cirt.dk/advisories/cirt-37-advisory.pdf - http://secunia.com/advisories/16854
CVE ID: CVE-2005-3041 State: PUBLISHED Published: 2005-09-22T04:00:00 Last Updated: 2024-08-07T22:53:30.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified "drag-and-drop vulnerability" in Opera Web Browser before 8.50 on Windows allows "unintentional file uploads." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/1789 - http://www.opera.com/docs/changelogs/windows/850/ - http://www.securityfocus.com/bid/14884
CVE ID: CVE-2005-3042 State: PUBLISHED Published: 2005-09-22T04:00:00 Last Updated: 2024-08-07T22:53:30.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters (line feed or carriage return). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16858 - http://secunia.com/advisories/17282 - http://www.gentoo.org/security/en/glsa/glsa-200509-17.xml - http://www.osvdb.org/19575 - http://securityreason.com/securityalert/17 - http://www.securityfoc
sa/glsa-200509-17.xml - http://www.osvdb.org/19575 - http://securityreason.com/securityalert/17 - http://www.securityfocus.com/bid/14889 - http://www.vupen.com/english/advisories/2005/1791 - http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/83_e.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:176 - http://www.novell.com/linux/security/advisories/2005_24_sr.html - http://archives.neohapsis.com/archives/bugtraq/2005-09/0257.html - http://www.webmin.com/changes-1.230.html - http://jvn.jp/jp/JVN%2340940493/index.html - http://www.webmin.com/uchanges-1.160.html
CVE ID: CVE-2005-3043 State: PUBLISHED Published: 2005-09-22T04:00:00 Last Updated: 2024-08-07T22:53:30.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in AddItem.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idOption_Dropdown_2 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0509-exploits/mall23.txt - http://systemsecure.org/ssforum/viewtopic.php?t=277 - http://secunia.com/advisories/16903 - http://www.securityfocus.com/bid/14898 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22356 - http://www.osvdb.org/19595 - http://www.vupen.com/engli
8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22356 - http://www.osvdb.org/19595 - http://www.vupen.com/english/advisories/2005/1811
CVE ID: CVE-2005-3044 State: PUBLISHED Published: 2005-09-22T04:00:00 Last Updated: 2024-08-07T22:53:30.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in Linux kernel before 2.6.13.2 allow local users to cause a denial of service (kernel OOPS from null dereference) via (1) fput in a 32-bit ioctl on 64-bit x86 systems or (2) sockfd_put in the 32-bit routing_ioctl function on 64-bit systems. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:235 - http://www.redhat.com/support/errata/RHSA-2006-0140.html - http://kernel.org/git/?p=linux/kernel/git/aegl/linux-2.6.git%3Ba=commitdiff
hat.com/support/errata/RHSA-2006-0140.html - http://kernel.org/git/?p=linux/kernel/git/aegl/linux-2.6.git%3Ba=commitdiff%3Bh=35311d6478077f7bfe35c1c653193e658bf32686 - http://secunia.com/advisories/17917 - http://www.securityfocus.com/bid/14902 - http://www.ubuntu.com/usn/usn-187-1 - http://kernel.org/git/?p=linux/kernel/git/chrisw/linux-2.6.13.y.git%3Ba=commit%3Bh=98debffa9114b60138b3dbd4d02ce13f01a07ab4 - http://www.securityfocus.com/advisories/9806 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://www.redhat.com/support/errata/RHSA-2006-0101.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.13.2 - http://www.securityfocus.com/archive/1/419522/100/0/
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.13.2 - http://www.securityfocus.com/archive/1/419522/100/0/threaded - http://www.securityfocus.com/archive/1/428058/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9561 - http://www.securityfocus.com/archive/1/427981/100/0/threaded - http://secunia.com/advisories/18510 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 - http://secunia.com/advisories/17826 - http://secunia.com/advisories/17918 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://www.debian.org/security/2006/dsa-1017 - http://www.mandriva.com/security/advisories?name=MDKSA-2005
/0/threaded - http://www.debian.org/security/2006/dsa-1017 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:059 - http://secunia.com/advisories/19374 - http://secunia.com/advisories/18562
CVE ID: CVE-2005-3045 State: PUBLISHED Published: 2005-09-23T04:00:00 Last Updated: 2024-08-07T22:53:30.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in My Little Forum 1.5 and 1.6 beta allows remote attackers to execute arbitrary SQL commands via the phrase field. Additional Analyst Notes: - CVE Program Container: References: - http://rgod.altervista.org/mylittle15_16b.html - http://secunia.com/advisories/16913/ - http://www.securityfocus.com/bid/14908 - http://marc.info/?l=bugtraq&m=112741430006983&w=2
CVE ID: CVE-2005-3046 State: PUBLISHED Published: 2005-09-23T04:00:00 Last Updated: 2024-08-07T22:53:30.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in password.php in PhpMyFaq 1.5.1 allows remote attackers to modify SQL queries and gain administrator privileges via the user field. Additional Analyst Notes: - CVE Program Container: References: - http://rgod.altervista.org/phpmyfuck151.html - http://marc.info/?l=bugtraq&m=112749230124091&w=2
CVE ID: CVE-2005-3047 State: PUBLISHED Published: 2005-09-23T04:00:00 Last Updated: 2024-08-07T22:53:30.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFaq 1.5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) PMF_CONF[version] parameter to footer.php or (2) PMF_LANG[metaLanguage] to header.php. Additional Analyst Notes: - CVE Program Container: References: - http://rgod.altervista.org/phpmyfuck151.html - http://marc.info/?l=bugtraq&m=112749230124091&w=2
CVE ID: CVE-2005-3048 State: PUBLISHED Published: 2005-09-23T04:00:00 Last Updated: 2024-08-07T22:53:30.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in PhpMyFaq 1.5.1 allows remote attackers to read arbitrary files or include arbitrary PHP files via a .. (dot dot) in the LANGCODE parameter, which also allows direct code injection via the User Agent field in a request packet, which can be activated by using LANGCODE to reference the user tracking data file. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/19672 - http://rgod.altervista.org/phpmyfuck151.html - http://marc.info/?l=bugtraq&m=11
ferences: - http://www.osvdb.org/19672 - http://rgod.altervista.org/phpmyfuck151.html - http://marc.info/?l=bugtraq&m=112749230124091&w=2
CVE ID: CVE-2005-3049 State: PUBLISHED Published: 2005-09-23T04:00:00 Last Updated: 2024-08-07T22:53:30.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhpMyFaq 1.5.1 stores data files under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain sensitive information via a direct request to the data/tracking[DATE] file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16933 - http://www.securityfocus.com/bid/14930 - http://www.osvdb.org/19670 - http://rgod.altervista.org/phpmyfuck151.html - http://marc.info/?l=bugtraq&m=112749230124091&w=2 - https://exchange.xforce
tp://rgod.altervista.org/phpmyfuck151.html - http://marc.info/?l=bugtraq&m=112749230124091&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22405 - http://securitytracker.com/id?1014968
CVE ID: CVE-2005-3050 State: PUBLISHED Published: 2005-09-23T04:00:00 Last Updated: 2024-08-07T22:53:30.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhpMyFaq 1.5.1 allows remote attackers to obtain sensitive information via a LANGCODE parameter that does not exist, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://rgod.altervista.org/phpmyfuck151.html - http://marc.info/?l=bugtraq&m=112749230124091&w=2