Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-2594 State: PUBLISHED Published: 2005-08-17T04:00:00Z Last Updated: 2024-09-17T04:13:54.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari 1.3 (132) on Mac OS X 1.3.9 allows remote attackers to cause a denial of service (crash) via certain Javascript, possibly involving a function that defines a handler for itself within the function body. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/407702 - http://www.securityfocus.com/bid/14528
CVE ID: CVE-2005-2595 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Dada Mail before 2.10 Alpha 1 allows remote attackers to execute arbitrary Javascript via archived messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14573 - http://mojo.skazat.com/download/testing_2_10_0_alpha1.html - http://secunia.com/advisories/16435
CVE ID: CVE-2005-2596 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: User.php in Gallery, as used in Postnuke, allows users with any Admin privileges to gain access to all galleries. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-879 - http://secunia.com/advisories/17367 - http://gallery.menalto.com/index.php?name=PNphpBB2&file=viewtopic&t=7048 - http://www.securityfocus.com/bid/14547 - http://secunia.com/advisories/16389
CVE ID: CVE-2005-2597 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitrary code with SYSTEM privileges by replacing ACSD.exe with a malicious program. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24324 - http://archives.neohapsis.com/archives/ntbugtraq/2005-08/0009.html - http://www.securityfocus.com/bid/14530
CVE ID: CVE-2005-2598 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Dokeos 1.6 and earlier, and possibly Claroline, allow remote attackers to (1) delete arbitrary files or directories via the delete parameter to claroline/scorm/scormdocument.php, (2) move arbitrary files via the move_to and move_file parameters to claroline/document/document.php, or determine the existence of arbitrary files via the file parameter to (3) claroline/scorm/showinframes.php or (4) claroline/scorm/contents.php. Additional Analyst Notes: - CVE Program Container: Refere
ne/scorm/showinframes.php or (4) claroline/scorm/contents.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/036345.html - http://secunia.com/advisories/16407 - http://seclists.org/lists/fulldisclosure/2005/Aug/0394.html
CVE ID: CVE-2005-2599 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hummingbird FTP for Connectivity 10.0 uses weak encryption (trivial encoding) to store the user's password in the FTP profile, which allows attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2005-08/0219.html - http://www.securityfocus.com/bid/14559 - http://www.osvdb.org/18734 - http://secunia.com/advisories/16430 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21811
CVE ID: CVE-2005-2600 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUDForum 2.6.15 with "Tree View" enabled, as used in other products such as phpgroupware and egroupware, allows remote attackers to read private posts via a modified mid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16414 - http://www.securityfocus.com/bid/14556 - http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0383.html - http://www.debian.org/security/2005/dsa-798 - http://www.debian.org/security/2005/dsa-899 - http://secunia.com/advisories/17643
CVE ID: CVE-2005-2601 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in MidiCart allows remote attackers to execute arbitrary SQL commands via the code_no parameter to (1) Item_Show.asp or (2) search_list.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14544 - http://systemsecure.org/ssforum/viewtopic.php?t=30 - http://securitytracker.com/id?1014660
CVE ID: CVE-2005-2602 State: PUBLISHED Published: 2005-08-17T04:00:00Z Last Updated: 2024-09-16T21:07:51.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Thunderbird 1.0 and Firefox 1.0.6 allows remote attackers to obfuscate URIs via a long URI, which causes the address bar to go blank and could facilitate phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/407704 - http://www.securityfocus.com/bid/14526 - http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=1682
CVE ID: CVE-2005-2603 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php for My Image Gallery (Mig ) 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the (1) currDir or (2) image parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14570 - http://secwatch.org/advisories/secwatch/20050813_Mig.txt - http://www.vupen.com/english/advisories/2005/1432 - http://www.osvdb.org/18741 - http://secunia.com/advisories/16405 - http://sourceforge.net/project/shownotes.php?release
http://www.osvdb.org/18741 - http://secunia.com/advisories/16405 - http://sourceforge.net/project/shownotes.php?release_id=349348
CVE ID: CVE-2005-2604 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php for My Image Gallery (Mig ) 1.4.1 allows remote attackers to obtain the web server path via certain currDir and image arguments, which leaks the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14570 - http://secwatch.org/advisories/secwatch/20050813_Mig.txt - http://www.osvdb.org/18742 - http://www.vupen.com/english/advisories/2005/1432 - http://secunia.com/advisories/16405 - http://sourceforge.net/project/shownotes.php?release_id=349348
CVE ID: CVE-2005-2605 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Lasso Professional Server8.0.4 and 8.0.5 allows attackers to bypass authentication, related to [Auth] tags. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16364 - http://www.omnipilot.com/Software%20Updates.1747.8901.lasso - http://www.securityfocus.com/bid/14543
CVE ID: CVE-2005-2606 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the "frontend authentication" in PHlyMail 3.02.00 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://phlymail.de/forum/viewtopic.php?t=698 - http://www.securityfocus.com/bid/14537 - http://secunia.com/advisories/16388 - http://www.vupen.com/english/advisories/2005/1365
CVE ID: CVE-2005-2607 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:02.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP file include vulnerability in download.php in PHPSimplicity Simplicity oF Upload before 1.3.1 allows remote attackers to include arbitrary local and remote files via the language parameter and a terminating null ("%00") characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpsimplicity.com/scripts.php?id=3 - http://securitytracker.com/id?1014591 - http://secunia.com/advisories/16273 - http://rgod.altervista.org/simply.html - http://www.securityfocus.com/bid/14424
CVE ID: CVE-2005-2608 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: SafeHTML before 1.3.5 does not properly filter script in UTF-7 and CSS comments, which allows remote attackers to conduct cross-site scripting (XSS) attacks in vulnerable applications that use SafeHTML. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14574 - http://secunia.com/advisories/16427
CVE ID: CVE-2005-2609 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to obtain the full server path via an invalid VDNS_Sessid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://vegadns.org/src/current/CHANGELOG - http://www.packetstormsecurity.org/0508-exploits/vegadns-dyn0.txt - http://secunia.com/advisories/16370
CVE ID: CVE-2005-2610 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://vegadns.org/src/current/CHANGELOG - http://www.packetstormsecurity.org/0508-exploits/vegadns-dyn0.txt - http://www.securityfocus.com/bid/14538 - http://secunia.com/advisories/16370
CVE ID: CVE-2005-2611 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to read and write arbitrary files with the backup server. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA05-224A.html - http://www.securityfocus.com/bid/14551 - http://secunia.com/advisories/16403 -
cert.gov/cas/techalerts/TA05-224A.html - http://www.securityfocus.com/bid/14551 - http://secunia.com/advisories/16403 - http://www.kb.cert.org/vuls/id/378957 - http://www.vupen.com/english/advisories/2005/1387 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21793 - http://securityresponse.symantec.com/avcenter/security/Content/2005.08.12b.html - http://securitytracker.com/id?1014662
CVE ID: CVE-2005-2612 State: PUBLISHED Published: 2005-08-17T04:00:00Z Last Updated: 2024-09-17T00:51:15.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_lastpostdate[server] cookie. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16386 - http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0234.html
CVE ID: CVE-2005-2613 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in CPAINT Ajax Toolkit before 1.3-SP allows attackers to execute arbitrary PHP or ASP code or read files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/21846 - http://www.securityfocus.com/bid/14565 - http://secunia.com/advisories/16462/ - http://www.securityfocus.com/archive/1/408130 - http://sourceforge.net/forum/forum.php?forum_id=488784
CVE ID: CVE-2005-2614 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Discuz! 4.0 rc4 does not properly restrict types of files that are uploaded to the server, which allows remote attackers to execute arbitrary commands via a filename containing ".php.rar" or other multiple extensions that include .php. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0440.html - http://securitytracker.com/id?1014673 - http://www.securityfocus.com/bid/14564 - http://secunia.com/advisories/16433
CVE ID: CVE-2005-2615 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in session.php in EQdkp before 1.3.0 has unknown impact and attack vectors, possibly involving auto_login_id. Additional Analyst Notes: - CVE Program Container: References: - http://eqdkp.com/?p=changelog - http://secunia.com/advisories/16285 - http://www.securityfocus.com/bid/14541
CVE ID: CVE-2005-2616 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers to execute arbitrary code via the path parameter to (1) initialize.php, (2) customize.php, (3) form.php, or (4) index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16434 - http://www.securityfocus.com/bid/14534 - http://www.securiteam.com/exploits/5JP0J15GKU.html - http://www.vupen.com/english/advisories/2005/1379 - http://packetstorm.linuxsecurity.com/0508-exploits/ezuploadRemote.txt - http://
vupen.com/english/advisories/2005/1379 - http://packetstorm.linuxsecurity.com/0508-exploits/ezuploadRemote.txt - http://securitytracker.com/id?1014723
CVE ID: CVE-2005-2617 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The syscall32_setup_pages function in syscall32.c for Linux kernel 2.6.12 and later, on the 64-bit x86 platform, does not check the return value of the insert_vm_struct function, which allows local users to trigger a memory leak via a 32-bit application with crafted ELF headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9fb1759a3102c26cd8f64254a7c3e532782c2bb8 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux
t%3Ba=commit%3Bh=9fb1759a3102c26cd8f64254a7c3e532782c2bb8 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=9fb1759a3102c26cd8f64254a7c3e532782c2bb8
CVE ID: CVE-2005-2618 State: PUBLISHED Published: 2006-02-15T00:00:00 Last Updated: 2024-08-07T22:30:02.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via (1) a UUE file containing an encoded file with a long filename handled by uudrdr.dll, (2) a compressed ZIP file with a long filename handled by kvarcve.dll, (3) a TAR archive with a long filename that is extracted to a directory with a long path handled by the TAR reader (tarrdr.dll), (4) an email that contains a long HTTP, FTP, or // link handl
y with a long path handled by the TAR reader (tarrdr.dll), (4) an email that contains a long HTTP, FTP, or // link handled by the HTML speed reader (htmsr.dll) or (5) an email containing a crafted long link handled by the HTML speed reader (htmsr.dll). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24635 - http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229918 - http://secunia.com/secunia_research/2005-34/advisory/ - http://www.osvdb.org/23067 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24636 - http://www.vupen.com/english/advisories/2006/0500 - http://www.vupen.com/english/advisories/2006/0501 - http:
es/24636 - http://www.vupen.com/english/advisories/2006/0500 - http://www.vupen.com/english/advisories/2006/0501 - http://www.securityfocus.com/archive/1/424626/100/0/threaded - http://www.osvdb.org/23064 - http://www.osvdb.org/23066 - http://securitytracker.com/id?1015657 - http://secunia.com/secunia_research/2005-36/advisory/ - http://www.osvdb.org/23065 - http://www.securityfocus.com/bid/16576 - http://www.securityfocus.com/archive/1/424689/100/0/threaded - http://secunia.com/advisories/16100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24639 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24638 - http://secunia.com/secunia_research/2005-32/advisory/ - http://www.kb.cert.
.xforce.ibmcloud.com/vulnerabilities/24638 - http://secunia.com/secunia_research/2005-32/advisory/ - http://www.kb.cert.org/vuls/id/884076 - http://secunia.com/secunia_research/2005-66/advisory/ - http://www.securityfocus.com/archive/1/424692/100/0/threaded - http://secunia.com/advisories/16280 - http://www.osvdb.org/23068 - http://www.securityfocus.com/archive/1/424666/100/0/threaded - http://secunia.com/secunia_research/2005-37/advisory/
CVE ID: CVE-2005-2619 State: PUBLISHED Published: 2006-02-15T00:00:00 Last Updated: 2024-08-07T22:30:01.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in kvarcve.dll in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete arbitrary files via a (1) ZIP, (2) UUE or (3) TAR archive that contains a .. (dot dot) in the filename, which is not properly handled when generating a preview. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229918 - http://www.vupen.com/english/advisories/2006/0500 - http://www.
w-1.ibm.com/support/docview.wss?rs=475&uid=swg21229918 - http://www.vupen.com/english/advisories/2006/0500 - http://www.osvdb.org/23066 - http://www.securityfocus.com/archive/1/424717/100/0/threaded - http://securitytracker.com/id?1015657 - http://www.securityfocus.com/bid/16576 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24637 - http://secunia.com/advisories/16100 - http://secunia.com/secunia_research/2005-30/advisory/ - http://secunia.com/secunia_research/2005-66/advisory/ - http://secunia.com/advisories/16280
CVE ID: CVE-2005-2620 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-07T22:30:01.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: grpWise.exe for Novell GroupWise client 5.5 through 6.5.2 stores the password in plaintext in memory, which allows attackers to obtain the password using a debugger or another mechanism to read process memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/windowsntfocus/5UP0Q0UG0I.html - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098073.htm - http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0858.html - http://securitytracker.com/id?1014247 - http://www.se
archives.neohapsis.com/archives/fulldisclosure/2005-08/0858.html - http://securitytracker.com/id?1014247 - http://www.securityfocus.com/bid/13997 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972056.htm - http://marc.info/?l=bugtraq&m=112431139225724&w=2 - http://www.osvdb.org/17470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21075 - http://archives.neohapsis.com/archives/bugtraq/2005-06/0158.html
CVE ID: CVE-2005-2621 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:01.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in ECW-Shop 6.0.2 allows remote attackers to obtain sensitive information via the (1) min or (2) max parameter with a "'" (single quote), which reveals the path in an error message, possibly due to a SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112421209919985&w=2 - http://securitytracker.com/id?1014734 - http://secunia.com/advisories/16459
CVE ID: CVE-2005-2622 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:01.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 6.0.2 allows remote attackers to inject arbitrary web script or HTML via the (1) max or (2) ctg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112421209919985&w=2 - http://securitytracker.com/id?1014734 - http://secunia.com/advisories/16459
CVE ID: CVE-2005-2623 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:01.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negative quantity for an item, which causes the price of the item to be subtracted from the total cost. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112421209919985&w=2 - http://securitytracker.com/id?1014734 - http://secunia.com/advisories/16459
CVE ID: CVE-2005-2624 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:01.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaint_argument[] parameter to (1) calculator.asp or (2) cpaintfile.asp, which is directly fed into an eval statement. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112421484419768&w=2
CVE ID: CVE-2005-2625 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:01.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in the checkBlacklist function in CPAINT allows remote attackers to execute arbitrary commands via the (1) ExecuteGlobal function or (2) GetRef statement, which is not included in the blacklist. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112421484419768&w=2
CVE ID: CVE-2005-2626 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:01.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Kismet before 2005-08-R1 allows remote attackers to have an unknown impact via unprintable characters in the SSID. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200508-10.xml - http://www.debian.org/security/2005/dsa-788 - http://www.novell.com/linux/security/advisories/2005_20_sr.html - http://secunia.com/advisories/16634 - http://secunia.com/advisories/16477 - http://www.vupen.com/english/advisories/2005/1422 - http://www.osvdb.org/18
6634 - http://secunia.com/advisories/16477 - http://www.vupen.com/english/advisories/2005/1422 - http://www.osvdb.org/18767 - http://secunia.com/advisories/16447 - http://www.kismetwireless.net/CHANGELOG - http://www.kismetwireless.net/blog/?entry=/kismet/entry-1124158146.txt - http://www.securityfocus.com/bid/14430