Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-1900 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the logging function in IGI 2 Covert Strike server 1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in RCON commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11299 - http://www.osvdb.org/4966 - http://securitytracker.com/id?1009667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15742 - http://www.securityfocus.com/bid/10053 - http://marc.info/?l=bugtraq&m=108120385811815&w=2 - http://aluig
lities/15742 - http://www.securityfocus.com/bid/10053 - http://marc.info/?l=bugtraq&m=108120385811815&w=2 - http://aluigi.altervista.org/adv/igi2fs-adv.txt
CVE ID: CVE-2004-1901 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2025-01-16T18:09:40.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/10060 - http://security.gentoo.org/glsa/glsa-200404-01.xml - http://secunia.com/advisories/11305 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15754
CVE ID: CVE-2004-1902 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediately after executing the First Time User Wizards, which allows local users to gain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/kb/entry.jspa?entryID=4062&categoryID=256 - http://www.osvdb.org/4942 - http://securitytracker.com/id?1009659 - http://www.securityfocus.com/bid/10049 - https://exchange.xforce.ibmcloud.com/vulnerabi
securitytracker.com/id?1009659 - http://www.securityfocus.com/bid/10049 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15737 - http://secunia.com/advisories/11293 - http://marc.info/?l=bugtraq&m=108127948610311&w=2
CVE ID: CVE-2004-1903 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in blaxxun 3D 7.0 allows remote attackers to execute arbitrary code via a long URL property inside an object tag. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15625 - http://marc.info/?l=bugtraq&m=108127833002955&w=2 - http://www.securityfocus.com/bid/10064
CVE ID: CVE-2004-1904 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108130573130482&w=2 - http://theinsider.deep-ice.com/texts/advisory53.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/15764 - http://www.securityfocus.com/bid/10065 - http://secunia.com/advisories/11312
CVE ID: CVE-2004-1905 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service (crash) by calling the SetSitesFile function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15831 - http://marc.info/?l=bugtraq&m=108130573130482&w=2 - http://theinsider.deep-ice.com/texts/advisory53.txt - http://www.securityfocus.com/bid/10067
CVE ID: CVE-2004-1906 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mcafee FreeScan allows remote attackers to cause a denial of service and possibly arbitrary code via a long string in the ScanParam property of a COM object, which may trigger a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019891.html - http://www.securityfocus.com/bid/10071 - http://theinsider.deep-ice.com/texts/advisory54.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/15772 - http://marc.info/?l=bugtraq&m=1081368727
s/advisory54.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/15772 - http://marc.info/?l=bugtraq&m=108136872711898&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019877.html - http://secunia.com/advisories/11313
CVE ID: CVE-2004-1907 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Filtering functionality in Kerio Personal Firewall (KPF) 4.0.13 allows remote attackers to cause a denial of service (crash) by sending hex-encoded URLs containing "%13%12%13". Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2004-04/0061.html - http://marc.info/?l=bugtraq&m=108137421524251&w=2 - http://www.securityfocus.com/bid/10075 - http://secunia.com/advisories/11331 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15821 - http://www.cipher.org.u
tp://secunia.com/advisories/11331 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15821 - http://www.cipher.org.uk/index.php?p=advisories/HEX-Kerio_Personal_Firewall_Remote_DOS_7-04-2004.advisory
CVE ID: CVE-2004-1908 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: McFreeScan.CoMcFreeScan.1 ActiveX object in Mcafee FreeScan allows remote attackers to obtain sensitive information via the GetSpecialFolderLocation function with certain parameters. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019891.html - http://marc.info/?l=bugtraq&m=108137545531496&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15782 - http://marc.info/?l=bugtraq&m=108136872711898&w=2 - http://lists.grok.org.uk/pipermail/full-dis
/vulnerabilities/15782 - http://marc.info/?l=bugtraq&m=108136872711898&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019877.html - http://secunia.com/advisories/11313 - http://www.securityfocus.com/bid/10077
CVE ID: CVE-2004-1909 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Claim Anti-Virus (ClamAV) 0.68 and earlier allows remote attackers to cause a denial of service (crash) via certain RAR archives, such as those generated by the Beagle/Bagle worm. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15553 - http://www.securityfocus.com/bid/9897 - http://freshmeat.net/projects/clamav/?branch_id=29355&release_id=154462 - http://security.gentoo.org/glsa/glsa-200404-07.xml - http://secunia.com/advisories/11177
CVE ID: CVE-2004-1910 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: rufsi.dll in Symantec Virus Detection allows remote attackers to cause a denial of service (crash) via a long string to the GetPrivateProfileString function. NOTE: this issue was originally reported as a buffer overflow, but that specific claim is disputed by the vendor, although a crash is acknowledged. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019891.html - http://www.securityfocus.com/bid/10069 - http://marc.info/?l=bugtraq&m=10814348502172
isclosure/2004-April/019891.html - http://www.securityfocus.com/bid/10069 - http://marc.info/?l=bugtraq&m=108143485021721&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15778 - http://marc.info/?l=bugtraq&m=108136901406896&w=2
CVE ID: CVE-2004-1911 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in AzDGDatingLite 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the (1) l parameter (aka language variable) to index.php or (2) id parameter to view.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15796 - http://secunia.com/advisories/11326 - http://www.osvdb.org/5018 - http://marc.info/?l=bugtraq&m=108144342317973&w=2 - http://www.securityfocus.com/bid/10084
CVE ID: CVE-2004-1912 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) modules.php, (2) block-Calendar.php, (3) block-Calendar1.php, (4) block-Calendar_center.php scripts in NukeCalendar 1.1.a, as used in PHP-Nuke, allow remote attackers to obtain sensitive information via a URL with an invalid argument, which reveals the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10082 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15795 - http://marc.info/?l=bugtraq&m=108144168932458&w=2
CVE ID: CVE-2004-1913 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to inject arbitrary web script or HTML via the eid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10082 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15798 - http://marc.info/?l=bugtraq&m=108144168932458&w=2
CVE ID: CVE-2004-1914 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to execute arbitrary SQL commands via the eid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10082 - http://marc.info/?l=bugtraq&m=108144168932458&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15799
CVE ID: CVE-2004-1915 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108145722229810&w=2 - http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.html - http://security.gentoo.org/glsa/glsa-200404-19.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/15803 - http://www.securityfocus.com/bid/10085 - http://secunia.com/
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/15803 - http://www.securityfocus.com/bid/10085 - http://secunia.com/advisories/11333
CVE ID: CVE-2004-1916 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function. Additional Analyst Notes: - CVE Program Container: References: - http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.html - http://security.gentoo.org/glsa/glsa-200404-19.xml - http://marc.info/?l=bugtraq&m=108146376315229&w=2 - http://www.securityfocus.co
ity.gentoo.org/glsa/glsa-200404-19.xml - http://marc.info/?l=bugtraq&m=108146376315229&w=2 - http://www.securityfocus.com/bid/10085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15814 - http://secunia.com/advisories/11333
CVE ID: CVE-2004-1917 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in test_func_func in LCDProc 0.4.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the str variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15817 - http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.html - http://security.gentoo.org/glsa/glsa-200404-19.xml - http://marc.info/?l=bugtraq&m=108146376315229&w=2 - http://www.securityfocus.com/bid/10085 - http://secunia
404-19.xml - http://marc.info/?l=bugtraq&m=108146376315229&w=2 - http://www.securityfocus.com/bid/10085 - http://secunia.com/advisories/11333
CVE ID: CVE-2004-1918 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: RSniff 1.0 allows remote attackers to cause a denial of service (connection exhaustion) via a large number of connections with a command other than AUTHENTICATE, or without any data, which prevents the socket from being closed properly. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/rsniff-adv.txt - http://secunia.com/advisories/11339 - http://www.securityfocus.com/bid/10093 - http://marc.info/?l=bugtraq&m=108152508004665&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilit
us.com/bid/10093 - http://marc.info/?l=bugtraq&m=108152508004665&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15823
CVE ID: CVE-2004-1919 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hash_strcmp function in hasch.c in Crackalaka 1.0.8 allows remote attackers to cause a denial of service (crash) via large malformed strings. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108152479316967&w=2 - http://secunia.com/advisories/11340 - http://www.securityfocus.com/bid/10092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15824
CVE ID: CVE-2004-1920 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: X-Micro WLAN 11b Broadband Router 1.2.2, 1.2.2.3, 1.2.2.4, and 1.6.0.0 has a hardcoded "super" username and password, which could allow remote attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10095 - http://marc.info/?l=bugtraq&m=108162529229947&w=2 - http://secunia.com/advisories/11342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15829
CVE ID: CVE-2004-1921 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: X-Micro WLAN 11b Broadband Router 1.6.0.1 has a hardcoded "1502" username and password, which could allow remote attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10095 - http://secunia.com/advisories/11342 - http://marc.info/?l=bugtraq&m=108223222519855&w=2 - http://marc.info/?l=bugtraq&m=108213608111111&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15890
CVE ID: CVE-2004-1922 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.5 and 6.0 allocates memory based on the memory size written in the BMP file instead of the actual BMP file size, which allows remote attackers to cause a denial of service (memory consumption) via a small BMP file with has a large memory size. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108183130827872&w=2
CVE ID: CVE-2004-1923 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to (1) banner_click.php, (2) categorize.php, (3) tiki-admin_include_directory.php, (4) tiki-directory_search.php, which reveal the web server path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10100 - http://marc.info/?l=bugtraq&m=108180073206947&w=2 - http://secunia.com/advisories/11344 - http://tikiwiki.org/tiki-read_article.php?art
o/?l=bugtraq&m=108180073206947&w=2 - http://secunia.com/advisories/11344 - http://tikiwiki.org/tiki-read_article.php?articleId=66 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15847
CVE ID: CVE-2004-1924 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via via the (1) theme parameter to tiki-switch_theme.php, (2) find and priority parameters to messu-mailbox.php, (3) flag, priority, flagval, sort_mode, or find parameters to messu-read.php, (4) articleId parameter to tiki-read_article.php, (5) parentId parameter to tiki-browse_categories.php, (6) comments_threshold parameter to tiki-index.php (7) articleId paramet
rentId parameter to tiki-browse_categories.php, (6) comments_threshold parameter to tiki-index.php (7) articleId parameter to tiki-print_article.php, (8) galleryId parameter to tiki-list_file_gallery.php, (9) galleryId parameter to tiki-upload_file.php, (10) faqId parameter to tiki-view_faq.php, (11) chartId parameter to tiki-view_chart.php, or (12) surveyId parameter to tiki-survey_stats_survey.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15846 - http://www.securityfocus.com/bid/10100 - http://marc.info/?l=bugtraq&m=108180073206947&w=2 - http://secunia.com/advisories/11344 - http://tikiwiki.org/tiki-read_article.p
rc.info/?l=bugtraq&m=108180073206947&w=2 - http://secunia.com/advisories/11344 - http://tikiwiki.org/tiki-read_article.php?articleId=66
CVE ID: CVE-2004-1925 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sort_mode parameter in (1) tiki-usermenu.php, (2) tiki-list_file_gallery.php, (3) tiki-directory_ranking.php, (4) tiki-browse_categories.php, (5) tiki-index.php, (6) tiki-user_tasks.php, (7) tiki-directory_ranking.php, (8) tiki-directory_search.php, (9) tiki-file_galleries.php, (10) tiki-list_faqs.php, (11) tiki-list_trackers.php, (12) tiki-list_blogs.php, or via the offset
i-file_galleries.php, (10) tiki-list_faqs.php, (11) tiki-list_trackers.php, (12) tiki-list_blogs.php, or via the offset parameter in (13) tiki-usermenu.php, (14) tiki-browse_categories.php, (15) tiki-index.php, (16) tiki-user_tasks.php, (17) tiki-list_faqs.php, (18) tiki-list_trackers.php, or (19) tiki-list_blogs.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10100 - http://marc.info/?l=bugtraq&m=108180073206947&w=2 - http://secunia.com/advisories/11344 - http://tikiwiki.org/tiki-read_article.php?articleId=66 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15845
CVE ID: CVE-2004-1926 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to inject arbitrary code via the (1) Theme, (2) Country, (3) Real Name, or (4) Displayed time zone fields in a User Profile, or the (5) Name, (6) Description, (7) URL, or (8) Country fields in a Directory/Add Site operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10100 - http://marc.info/?l=bugtraq&m=108180073206947&w=2 - http://secunia.com/advisories/11344 - http://tikiwiki.org/tiki-read_article.p
CVE ID: CVE-2004-1927 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the map feature (tiki-map.phtml) in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to determine the existence of arbitrary files via .. (dot dot) sequences in the mapfile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10100 - http://marc.info/?l=bugtraq&m=108180073206947&w=2 - http://secunia.com/advisories/11344 - http://tikiwiki.org/tiki-read_article.php?articleId=66 - https://exchange.xforce.ibmcloud.co
unia.com/advisories/11344 - http://tikiwiki.org/tiki-read_article.php?articleId=66 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15848
CVE ID: CVE-2004-1928 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wiki_up URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15849 - http://www.securityfocus.com/bid/10100 - http://marc.info/?l=bugtraq&m=108180073206947&w=2 - http://secunia.com/advisories/11344 - http://tikiwiki.org/tiki-read_article.php?articleId=66
CVE ID: CVE-2004-1929 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attackers to bypass authentication and gain access by injecting base64-encoded SQL code into the user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10135 - http://secunia.com/advisories/11347 - http://marc.info/?l=bugtraq&m=108180111826852&w=2 - http://www.waraxe.us/index.php?modname=sa&id=17 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15839
CVE ID: CVE-2004-1930 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP-Nuke 6.x through 7.2, when themes are used, allows remote attackers to inject arbitrary web script or HTML via a base64-encoded user parameter or cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15842 - http://www.securityfocus.com/bid/10128 - http://secunia.com/advisories/11347 - http://www.waraxe.us/index.php?modname=sa&id=16 - http://marc.info/?l=bugtraq&m
- http://secunia.com/advisories/11347 - http://www.waraxe.us/index.php?modname=sa&id=16 - http://marc.info/?l=bugtraq&m=108182759214035&w=2