Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ecurityfocus.com/bid/10256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16054 - http://secunia.com/advisories/9578 - http://securitytracker.com/id?1007819 - http://www.idefense.com/application/poi/display?id=103&type=vulnerabilities&flashstatus=true - http://archives.neohapsis.com/archives/bugtraq/2004-04/0353.html
CVE ID: CVE-2003-1287 State: PUBLISHED Published: 2005-11-22T02:00:00 Last Updated: 2024-08-08T02:19:46.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code via a request with an MS-DOS device name such as com1.pl, con.pl, or aux.pl, which causes Perl to read the code from the associated device. Additional Analyst Notes: - CVE Program Container: References: - http://www.sambar.com/security.htm - http://secunia.com/advisories/9578 - http://www.osvdb.org/5781 - http://securitytracker.com/id?1007819 - http://www.idefense.com/application/poi/display?id=103&type=vulnerabilities&flashstatus=t
curitytracker.com/id?1007819 - http://www.idefense.com/application/poi/display?id=103&type=vulnerabilities&flashstatus=true - http://archives.neohapsis.com/archives/bugtraq/2004-04/0353.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16059
CVE ID: CVE-2003-1288 State: PUBLISHED Published: 2005-12-04T11:00:00 Last Updated: 2024-08-08T02:19:46.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in Linux-VServer 1.22 with Linux kernel 2.4.23 and SMP allow local users to cause a denial of service (kernel oops) via unknown attack vectors related to the (1) s_info and (2) ip_info data structures and the (a) forget_original_parent, (b) goodness, (c) schedule, (d) update_process_times, and (e) vc_new_s_context functions. Additional Analyst Notes: - CVE Program Container: References: - http://linux-vserver.org/ChangeLog - http://list.linux-vserver.org/archive/vserver/msg05631.html - http://list.linu
s: - http://linux-vserver.org/ChangeLog - http://list.linux-vserver.org/archive/vserver/msg05631.html - http://list.linux-vserver.org/archive/vserver/msg05658.html - http://list.linux-vserver.org/archive/vserver/msg05630.html - http://www.osvdb.org/7587
CVE ID: CVE-2003-1289 State: PUBLISHED Published: 2005-12-17T21:00:00 Last Updated: 2024-08-08T02:19:46.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iBCS2 system call translator for statfs in NetBSD 1.5 through 1.5.3 and FreeBSD 4 up to 4.8-RELEASE-p2 and 5 up to 5.1-RELEASE-p1 allows local users to read portions of kernel memory (memory disclosure) via a large length parameter, which copies additional kernel memory into userland memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/2406 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12892 - http://secunia.com/advisories/9504 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advis
e.ibmcloud.com/vulnerabilities/12892 - http://secunia.com/advisories/9504 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:10.ibcs2.asc - http://securitytracker.com/id?1007460
CVE ID: CVE-2003-1290 State: PUBLISHED Published: 2006-01-13T11:00:00 Last Updated: 2024-08-08T02:19:46.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup enabled, allows remote attackers to obtain configuration information by accessing MBeanHome via the Java Naming and Directory Interface (JNDI). Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/pub/advisory/162 - http://www.securityfocus.com/bid/9034 - http://secunia.com/advisories/10218 - http://secunia.com/advisories/18396 - http://www.osvdb.org/3064 - http://www.securityfocus.com/bid/16215 -
ries/10218 - http://secunia.com/advisories/18396 - http://www.osvdb.org/3064 - http://www.securityfocus.com/bid/16215 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13752
CVE ID: CVE-2003-1291 State: PUBLISHED Published: 2006-02-01T20:00:00Z Last Updated: 2024-09-16T18:13:21.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware ESX Server 1.5.2 before Patch 4 allows local users to execute arbitrary programs as root via certain modified VMware ESX Server environment variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21585 - http://www.vmware.com/download/esx/esx152-patch4.html - http://www.vmware.com/support/kb/enduser/std_adp.php?p_sid=dsxk%2ABWh&p_lva=&p_faqid=1108
CVE ID: CVE-2003-1292 State: PUBLISHED Published: 2006-02-02T11:00:00 Last Updated: 2024-08-08T02:19:46.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbitrary remote files via a URL in the pathtoashnews parameter to (1) ashnews.php and (2) ashheadlines.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1864 - http://www.securityfocus.com/bid/18248 - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0980.html - http://secunia.com/advisories/9331 - http://forums.ashwebstudio.com/viewtopic.php?t=3
fulldisclosure/2006-01/0980.html - http://secunia.com/advisories/9331 - http://forums.ashwebstudio.com/viewtopic.php?t=353&start=0 - http://www.securityfocus.com/archive/1/329910 - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0979.html - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0969.html - http://www.securityfocus.com/bid/16436
CVE ID: CVE-2003-1293 State: PUBLISHED Published: 2006-02-04T02:00:00Z Last Updated: 2024-09-16T20:32:16.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in NukedWeb GuestBookHost allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Email and (3) Message fields when signing the guestbook. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/326506 - http://www.securityfocus.com/bid/8025
CVE ID: CVE-2003-1294 State: PUBLISHED Published: 2006-02-28T01:00:00 Last Updated: 2024-08-08T02:19:46.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2) driver/xscreensaver-getimage-video, (3) driver/xscreensaver.kss.in, and the (4) vidwhacker and (5) webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2006-107.htm - https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=124968 - https://oval.cisecurity.org/repository/sear
06-107.htm - https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=124968 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10848 - http://secunia.com/advisories/20782 - http://www.redhat.com/support/errata/RHSA-2006-0498.html - http://www.vupen.com/english/advisories/2006/1948 - http://secunia.com/advisories/20224 - http://www.securityfocus.com/bid/9125 - ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc - http://secunia.com/advisories/20456 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=182286 - http://www.novell.com/linux/download/updates/90_i386.html - http://jwz.livejournal.com/310943.html - http://secunia.com/adviso
/www.novell.com/linux/download/updates/90_i386.html - http://jwz.livejournal.com/310943.html - http://secunia.com/advisories/20226
CVE ID: CVE-2003-1295 State: PUBLISHED Published: 2006-02-28T01:00:00Z Last Updated: 2024-09-16T19:24:27.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in xscreensaver 4.12, and possibly other versions, allows attackers to cause xscreensaver to crash via unspecified vectors "while verifying the user-password." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9125 - http://www.novell.com/linux/download/updates/90_i386.html
CVE ID: CVE-2003-1296 State: PUBLISHED Published: 2006-03-19T23:00:00 Last Updated: 2024-08-08T02:19:46.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Easy File Sharing (EFS) Web Server 1.2 allows remote authenticated users to cause a denial of service via (1) an "empty symbol" in the Title field or (2) certain data in the Your Message field, possibly a long argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13360 - http://archives.neohapsis.com/archives/bugtraq/2003-10/0083.html
CVE ID: CVE-2003-1297 State: PUBLISHED Published: 2006-03-19T23:00:00Z Last Updated: 2024-09-16T20:03:22.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Easy File Sharing (EFS) Web Server 1.2 stores the (1) option.ini (aka options.ini) file and (2) log directory under the web root with insufficient access control, which allows remote attackers to obtain sensitive information including an SMTP account username and password hash, the server configuration, and server log files. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23794 - http://www.osvdb.org/23795 - http://archives.neohapsis.com/archives/bugtraq/2003-10/0083.html
CVE ID: CVE-2003-1298 State: PUBLISHED Published: 2006-03-23T11:00:00 Last Updated: 2024-08-08T02:19:46.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in siteman.php3 in AnyPortal(php) 12 MAY 00 allow remote attackers to (1) create, (2) delete, (3) save, and (4) upload files by navigating to the root directory and entering a filename beginning with "./.." (dot slash dot dot). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19359 - http://www.vupen.com/english/advisories/2006/1053 - http://www.securityfocus.com/bid/17197 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25396 - ht
ies/2006/1053 - http://www.securityfocus.com/bid/17197 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25396 - http://www.osvdb.org/23984 - http://nger.org/anyportal/forum/read.php?f=1&i=152&t=152#reply_152
CVE ID: CVE-2003-1299 State: PUBLISHED Published: 2006-03-24T11:00:00 Last Updated: 2024-08-08T02:19:46.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Baby FTP Server 1.2, and possibly other versions before May 31, 2003 allows remote authenticated users to list arbitrary directories and possibly read files via "..." (triple dot) manipulations to the CWD command. Additional Analyst Notes: - CVE Program Container: References: - http://www.pablosoftwaresolutions.com/html/baby_ftp_server.html - http://www.securityfocus.com/bid/7749 - http://www.osvdb.org/24538 - http://packetstormsecurity.org/0305-exploits/baby.txt
CVE ID: CVE-2003-1300 State: PUBLISHED Published: 2006-03-24T11:00:00 Last Updated: 2024-08-08T02:19:46.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby FTP Server (BabyFTP) 1.2, and possibly other versions before May 31, 2003, allows remote attackers to cause a denial of service via a large number of connections from the same IP address, which triggers an access violation. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24539 - http://www.pablosoftwaresolutions.com/html/baby_ftp_server.html - http://packetstormsecurity.org/0305-exploits/baby.txt
CVE ID: CVE-2003-1301 State: PUBLISHED Published: 2006-05-26T01:00:00 Last Updated: 2024-08-08T02:19:46.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java Runtime Environment (JRE) 1.x before 1.4.2_11 and 1.5.x before 1.5.0_06, and as used in multiple web browsers, allows remote attackers to cause a denial of service (application crash) via deeply nested object arrays, which are not properly handled by the garbage collector and trigger invalid memory accesses. Additional Analyst Notes: - CVE Program Container: References: - http://www.illegalaccess.org/exploit/ObjectStackOverflow.html - http://www.securityfocus.com/bid/18058 - http://bugs.sun.com/bugdatabase/view_bug.do
/exploit/ObjectStackOverflow.html - http://www.securityfocus.com/bid/18058 - http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4944300 - http://www.securityfocus.com/archive/1/434705/100/0/threaded - http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4396719
CVE ID: CVE-2003-1302 State: PUBLISHED Published: 2006-06-14T22:00:00 Last Updated: 2024-08-08T02:19:46.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMAP functionality in PHP before 4.3.1 allows remote attackers to cause a denial of service via an e-mail message with a (1) To or (2) From header with an address that contains a large number of "\" (backslash) characters. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.php.net/bug.php?id=22048 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175040
CVE ID: CVE-2003-1303 State: PUBLISHED Published: 2006-06-14T22:00:00 Last Updated: 2024-08-08T02:19:46.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long e-mail address in a (1) To or (2) From header. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.php.net/bug.php?id=24150 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10346 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1
epository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10346 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175040
CVE ID: CVE-2003-1304 State: PUBLISHED Published: 2006-07-13T00:00:00 Last Updated: 2024-08-08T02:19:46.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: EarlyImpact ProductCart 1.0 through 2.0 stores database/EIPC.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive database information via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/9816 - http://www.securityfocus.com/archive/1/438189/100/200/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2003-q3/0081.html - http://www.earlyimpact.com/pdf/ProductCart_Security_Tips.
ives.neohapsis.com/archives/fulldisclosure/2003-q3/0081.html - http://www.earlyimpact.com/pdf/ProductCart_Security_Tips.pdf - http://www.securityfocus.com/bid/8112 - http://secunia.com/advisories/9195
CVE ID: CVE-2003-1305 State: PUBLISHED Published: 2006-08-30T01:00:00Z Last Updated: 2024-09-16T16:24:10.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer allows remote attackers to cause a denial of service (resource consumption) via a Javascript src attribute that recursively loads the current web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/2291 - http://archive.cert.uni-stuttgart.de/archive/bugtraq/2003/07/msg00068.html
CVE ID: CVE-2003-1306 State: PUBLISHED Published: 2006-10-09T18:00:00Z Last Updated: 2024-09-17T04:19:30.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft URLScan 2.5, with the RemoveServerHeader option enabled, allows remote attackers to obtain sensitive information (server name and version) via an HTTP request that generates certain errors such as 400 "Bad Request," which leak the Server header in the response. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29370 - http://secunia.com/advisories/9194 - http://archives.neohapsis.com/archives/sf/www-mobile/2003-q3/0021.html
CVE ID: CVE-2003-1307 State: PUBLISHED Published: 2006-10-23T17:00:00 Last Updated: 2024-08-08T02:19:46.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server's TCP port. NOTE: the PHP developer has disputed this vulnerability, saying "The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP. Additional Analyst Notes: - CVE Program Container: References: -
he job of Apache to protect them ... Not a bug in PHP. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/449234/100/0/threaded - http://www.securityfocus.com/archive/1/449298/100/0/threaded - http://bugs.php.net/38915 - http://www.securityfocus.com/archive/1/348368 - http://hackerdom.ru/~dimmo/phpexpl.c - http://www.securityfocus.com/bid/9302
CVE ID: CVE-2003-1308 State: PUBLISHED Published: 2006-11-17T23:00:00Z Last Updated: 2024-09-16T16:22:57.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in fvwm-menu-directory for fvwm 2.5.x before 2.5.10 and 2.4.x before 2.4.18 allows local users to execute arbitrary commands via carriage returns in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9161 - http://www.fvwm.org/news/
CVE ID: CVE-2003-1309 State: PUBLISHED Published: 2006-11-30T16:00:00 Last Updated: 2024-08-08T02:19:46.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DeviceIoControl function in the TrueVector Device Driver (VSDATANT) in ZoneAlarm before 3.7.211, Pro before 4.0.146.029, and Plus before 4.0.146.029 allows local users to gain privileges via certain signals (aka "Device Driver Attack"). Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4362 - http://www.securityfocus.com/bid/8342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12824 - http://download.zonelabs.com/bin/free/information/znalm/zaReleaseHistory.html - http://sec-labs.h
ulnerabilities/12824 - http://download.zonelabs.com/bin/free/information/znalm/zaReleaseHistory.html - http://sec-labs.hack.pl/papers/win32ddc.php - http://sec-labs.hack.pl/advisories/seclabs-adv-zone-alarm-04-08-2003.txt - http://www.osvdb.org/2375 - http://secunia.com/advisories/9459 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0070.html
CVE ID: CVE-2003-1310 State: PUBLISHED Published: 2006-11-30T16:00:00 Last Updated: 2024-08-08T02:19:46.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DeviceIoControl function in the Norton Device Driver (NAVAP.sys) in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes (aka "Device Driver Attack"). Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4362 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12824 - http://sec-labs.hack.pl/papers/win32ddc.php - http://www.securityfocus.com/bid/8329 - http://secunia.com/advisories/9460
CVE ID: CVE-2003-1311 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-08T02:19:46.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder does not ensure that the TARGET parameter names a valid redirection resource, which allows remote attackers to construct a URL that might trick users into visiting an arbitrary web site referenced by this parameter. Additional Analyst Notes: - CVE Program Container: References: - http://curl.haxx.se/mail/archive-2003-05/0172.html - http://www.osvdb.org/30741
CVE ID: CVE-2003-1312 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-08T02:19:46.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder places a session ID string in the value of the SMSESSION parameter in a URL, which might allow remote attackers to obtain the ID by sniffing, reading Referer logs, or other methods. Additional Analyst Notes: - CVE Program Container: References: - http://curl.haxx.se/mail/archive-2003-05/0172.html - http://www.osvdb.org/30741
CVE ID: CVE-2003-1313 State: PUBLISHED Published: 2006-12-27T00:00:00Z Last Updated: 2024-09-17T02:47:54.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in EternalMart Mailing List Manager (EMLM) 1.32 allow remote attackers to execute arbitrary PHP code via a URL in (1) the emml_admin_path parameter to admin/auth.php or (2) the emml_path parameter to emml_email_func.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/340244 - http://securitytracker.com/id?1007884 - http://www.securityfocus.com/bid/8767
CVE ID: CVE-2003-1314 State: PUBLISHED Published: 2006-12-27T00:00:00 Last Updated: 2024-08-08T02:19:46.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/auth.php in EternalMart Guestbook (EMGB) 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the emgb_admin_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/340244 - http://securitytracker.com/id?1007885 - http://www.securityfocus.com/bid/21720 - http://www.securityfocus.com/bid/8767 - https://www.exploit-db.com/exploits/2980
CVE ID: CVE-2003-1315 State: PUBLISHED Published: 2006-12-29T11:00:00 Last Updated: 2024-08-08T02:19:46.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in auth.php in Land Down Under (LDU) v601 and earlier allows remote attackers to execute arbitrary SQL commands. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1008416 - http://www.neocrome.net/index.php?m=single&id=76 - http://www.neocrome.net/page.php?id=1250 - http://www.osvdb.org/2943 - http://www.securityfocus.com/bid/9168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13922 - http://secunia.com/advisories/10396
CVE ID: CVE-2003-1316 State: PUBLISHED Published: 2007-01-05T02:00:00 Last Updated: 2024-08-08T02:19:46.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod.php in eNdonesia 8.2 allows remote attackers to obtain sensitive information via a ' (quote) value in the lng parameter, which reveals the path in an error message. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/9622 - http://securitytracker.com/id?1007592 - http://www.osvdb.org/3666 - http://www.securityfocus.com/bid/8507 - https://exchange.xforce.ibmcloud.com/v
/id?1007592 - http://www.osvdb.org/3666 - http://www.securityfocus.com/bid/8507 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13042
CVE ID: CVE-2003-1317 State: PUBLISHED Published: 2007-01-05T02:00:00 Last Updated: 2024-08-08T02:19:46.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mod.php in eNdonesia 8.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/9622 - http://www.osvdb.org/2480 - http://www.securityfocus.com/bid/8506 - http://securitytracker.com/id?1007592 - https://exchange.xforce.ibmcloud.com/vulnerabilities
ecurityfocus.com/bid/8506 - http://securitytracker.com/id?1007592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13041