Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-4031 State: PUBLISHED Published: 2005-12-06T11:00:00 Last Updated: 2024-08-07T23:31:48.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that is processed using the eval function. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=34373&release_id=375755 - http://secunia.com/advisories/17866 - http://www.securityfocus.com/bid/15703 - http://www.vupen.com/english/advisories/2005/2726 - http://www.kb.cert.o
7866 - http://www.securityfocus.com/bid/15703 - http://www.vupen.com/english/advisories/2005/2726 - http://www.kb.cert.org/vuls/id/392156
CVE ID: CVE-2005-4032 State: PUBLISHED Published: 2005-12-06T11:00:00 Last Updated: 2024-08-07T23:31:48.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2742 - http://pridels0.blogspot.com/2005/12/easy-search-system-v11-xss-vuln.html - http://secunia.com/advisories/17823 - http://www.securityfocus.com/bid/15705
CVE ID: CVE-2005-4033 State: PUBLISHED Published: 2005-12-06T11:00:00 Last Updated: 2024-08-07T23:31:49.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nodezilla 0.4.13-corno-fulgure does not properly protect the evl_data directory, which could allow them to be shared when they are not protected by PRIVATEDATADIR in nodezilla.ini, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17867 - http://www.vupen.com/english/advisories/2005/2731 - http://www.nodezilla.net/history.txt - http://www.securityfocus.com/bid/15704
CVE ID: CVE-2005-4034 State: PUBLISHED Published: 2005-12-06T11:00:00 Last Updated: 2024-08-07T23:31:48.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) pg, and (3) sortb parameters to (a) index.php; (4) cid parameter to (b) gift.php and (c) fq.php; and (5) cat parameter to (d) articles.php. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/web4future-edating-professional-v5-sql.html - http://secunia.com/advisories/17879 - http://www.vupen.com/english/advisories/2005/2734 - ht
-professional-v5-sql.html - http://secunia.com/advisories/17879 - http://www.vupen.com/english/advisories/2005/2734 - http://www.osvdb.org/21419 - http://www.osvdb.org/21418 - http://www.securityfocus.com/bid/15715 - http://www.osvdb.org/21421 - http://www.osvdb.org/21420
CVE ID: CVE-2005-4035 State: PUBLISHED Published: 2005-12-06T11:00:00 Last Updated: 2024-08-07T23:31:48.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prod, and (2) brid parameters to (a) view.php; the (3) the bid parameter to (b) viewbrands.php; and the (4) grp and (5) cat parameters to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21468 - http://secunia.com/advisories/17881 - http://www.vupen.com/english/advisories/2005/2744 - http://pridels0.blogspot.com/200
tp://secunia.com/advisories/17881 - http://www.vupen.com/english/advisories/2005/2744 - http://pridels0.blogspot.com/2005/12/ecommerce-enterprise-edition-sql-inj.html - http://www.osvdb.org/21467 - http://www.securityfocus.com/bid/15707 - http://www.osvdb.org/21466
CVE ID: CVE-2005-4036 State: PUBLISHED Published: 2005-12-06T11:00:00 Last Updated: 2024-08-07T23:31:48.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.cgi in Web4Future KeyWord Frequency Counter 1.0 allows remote attackers to inject arbitrary web script or HTML via the "remote URL." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17876 - http://pridels0.blogspot.com/2005/12/keyword-frequency-counter-v10-xss-vuln.html - http://www.securityfocus.com/bid/15702 - http://www.vupen.com/english/advisories/2005/2743
CVE ID: CVE-2005-4037 State: PUBLISHED Published: 2005-12-06T11:00:00 Last Updated: 2024-08-07T23:31:48.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in functions.php in Web4Future Affiliate Manager PRO 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21457 - http://pridels0.blogspot.com/2005/12/web4future-affiliate-manager-pro-sql.html - http://www.securityfocus.com/bid/15717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23415 - http://secunia.com/advisories/17883 - http://www.vupen.com/english/advisories
force.ibmcloud.com/vulnerabilities/23415 - http://secunia.com/advisories/17883 - http://www.vupen.com/english/advisories/2005/2745
CVE ID: CVE-2005-4038 State: PUBLISHED Published: 2005-12-06T11:00:00 Last Updated: 2024-08-07T23:31:48.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comentarii.php in Web4Future Portal Solutions News Portal allows remote attackers to execute arbitrary SQL commands via the idp parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2733 - http://www.securityfocus.com/bid/15716 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23419 - http://pridels0.blogspot.com/2005/12/web4future-portal-solutions-news.html - http://www.osvdb.org/21422 - http://secunia.com/advisories/17880
CVE ID: CVE-2005-4039 State: PUBLISHED Published: 2005-12-06T11:00:00 Last Updated: 2024-08-07T23:31:48.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows remote attackers to read arbitrary files via the dir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23421 - http://www.vupen.com/english/advisories/2005/2733 - http://www.securityfocus.com/bid/15718 - http://www.osvdb.org/21423 - http://pridels0.blogspot.com/2005/12/web4future-portal-solutions-news.html - http://secunia.com/advisories/17880
CVE ID: CVE-2005-4040 State: PUBLISHED Published: 2005-12-06T11:00:00 Last Updated: 2024-08-07T23:31:48.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in FileLister 0.51 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameters, possibly the searchwhat parameter to definesearch.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17821 - http://www.securityfocus.com/bid/15706 - http://www.osvdb.org/21476 - http://www.osvdb.org/21416 - http://pridels0.blogspot.com/2005/12/filelister-sql-inj-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/23418 - ht
els0.blogspot.com/2005/12/filelister-sql-inj-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/23418 - http://www.vupen.com/english/advisories/2005/2725
CVE ID: CVE-2005-4041 State: PUBLISHED Published: 2005-12-06T11:00:00 Last Updated: 2024-08-07T23:31:48.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.cgi in MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x allows remote attackers to inject arbitrary web script or HTML via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15708 - http://www.vupen.com/english/advisories/2005/2736 - http://pridels0.blogspot.com/2005/12/hot-links-sql-3x-xss-vuln.html - http://pridels0.blogspot.com/2005/12/hot-links-pro-3x-xss-vuln.html - http://secunia.com/advisories/17868
s-vuln.html - http://pridels0.blogspot.com/2005/12/hot-links-pro-3x-xss-vuln.html - http://secunia.com/advisories/17868 - http://www.vupen.com/english/advisories/2005/2737 - http://secunia.com/advisories/17872
CVE ID: CVE-2005-4042 State: PUBLISHED Published: 2005-12-06T11:00:00 Last Updated: 2024-08-07T23:31:48.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Warm Links 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to search.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17864 - http://www.vupen.com/english/advisories/2005/2738 - http://www.osvdb.org/21439 - http://pridels0.blogspot.com/2005/12/warm-links-xss-vuln.html
CVE ID: CVE-2005-4043 State: PUBLISHED Published: 2005-12-06T11:00:00 Last Updated: 2024-08-07T23:31:48.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view.php in Hobosworld HobSR 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) arrange and (2) p parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2732 - http://www.securityfocus.com/bid/15713 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23404 - http://pridels0.blogspot.com/2005/12/hobsr-sql-inj-vuln.html - http://secunia.com/advisories/17884 - http://www.osvdb.org/21417
CVE ID: CVE-2005-4044 State: PUBLISHED Published: 2005-12-06T11:00:00 Last Updated: 2024-08-07T23:31:48.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.cgi in Amazon Search Directory 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/amazon-search-directory-xss-vuln.html - http://www.vupen.com/english/advisories/2005/2735 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23408 - http://www.osvdb.org/21438 - http://secunia.com/advisories
https://exchange.xforce.ibmcloud.com/vulnerabilities/23408 - http://www.osvdb.org/21438 - http://secunia.com/advisories/17875
CVE ID: CVE-2005-4045 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:48.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in Sun Java System Messaging Server 2005Q1 allows remote attackers to obtain the Top-Level Administrator (TLA) default password via unknown vectors, possibly involving configure_toplevel_admin.ldif. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000831.1-1 - http://securitytracker.com/id?1015313 - http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-10
7-1000831.1-1 - http://securitytracker.com/id?1015313 - http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102068-1 - http://secunia.com/advisories/17889 - http://www.securityfocus.com/bid/15733 - http://www.vupen.com/english/advisories/2005/2754
CVE ID: CVE-2005-4046 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:48.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server Enterprise Edition 8.1 2005Q1, and Sun ONE Application Server 7 Standard Edition, as used in multiple web servers, allows remote attackers to conduct man-in-the-middle (MITM) attacks and "compromise data privacy." Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102012-1 - http://www.vupen.com/english/advisories/
ces: - http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102012-1 - http://www.vupen.com/english/advisories/2005/2753 - http://securitytracker.com/id?1015312 - http://www.securityfocus.com/bid/15728 - http://secunia.com/advisories/17873
CVE ID: CVE-2005-4047 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:48.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in kb.asp in IISWorks ASPKnowledgeBase 2.0 allows remote attackers to inject arbitrary web script or HTML via the a parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17901 - http://www.securityfocus.com/bid/15734 - http://pridels0.blogspot.com/2005/12/iisworks-asp-knowledgebase-2x-xss-vuln.html - http://www.vupen.com/english/advisories/2005/2762
CVE ID: CVE-2005-4048 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:48.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes. Additional Analyst Notes: - CVE Program Container: References: - http://www.us.debian.org/security/2006/dsa-992 - http://www.gentoo.org/security/en/glsa/glsa-200602-01.xml - http://www.mandriva.com/security/advisories?name=MDKSA-20
- http://www.gentoo.org/security/en/glsa/glsa-200602-01.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2005:229 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:232 - http://secunia.com/advisories/19272 - https://usn.ubuntu.com/230-1/ - http://www.debian.org/security/2006/dsa-1005 - http://secunia.com/advisories/19114 - http://www.gentoo.org/security/en/glsa/glsa-200601-06.xml - http://secunia.com/advisories/18087 - http://www1.mplayerhq.hu/cgi-bin/cvsweb.cgi/ffmpeg/libavcodec/utils.c?rev=1.162&content-type=text/x-cvsweb-markup&cvsroot=FFMpeg - http://cvs.freedesktop.org/gstreamer/gst-ffmpeg/ChangeLog?rev=1.239&view=markup - http://secunia.com/advisories/18400 - h
ttp://cvs.freedesktop.org/gstreamer/gst-ffmpeg/ChangeLog?rev=1.239&view=markup - http://secunia.com/advisories/18400 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:230 - http://www.gentoo.org/security/en/glsa/glsa-200603-03.xml - http://secunia.com/advisories/17892 - http://secunia.com/advisories/18746 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:228 - http://secunia.com/advisories/19192 - http://article.gmane.org/gmane.comp.video.ffmpeg.devel/26558 - https://usn.ubuntu.com/230-2/ - http://www.mandriva.com/security/advisories?name=MDKSA-2005:231 - http://www.vupen.com/english/advisories/2005/2770 - http://www.debian.org/security/2006/dsa-1004 - http://secunia.
231 - http://www.vupen.com/english/advisories/2005/2770 - http://www.debian.org/security/2006/dsa-1004 - http://secunia.com/advisories/18739 - http://secunia.com/advisories/18107 - http://secunia.com/advisories/19279 - http://www.securityfocus.com/bid/15743 - http://secunia.com/advisories/18066 - http://www1.mplayerhq.hu/cgi-bin/cvsweb.cgi/ffmpeg/libavcodec/utils.c.diff?r1=1.161&r2=1.162&cvsroot=FFMpeg
CVE ID: CVE-2005-4049 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:48.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via (1) the cat parameter in index.php and (2) the note parameter in blog.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15719/ - http://www.osvdb.org/21454 - http://www.vupen.com/english/advisories/2005/2767 - http://www.securityfocus.com/archive/1/418640/100/0/threaded - http://securitytracker.com/id?1015310 - http://securityreason.com/securityalert/230 - h
rchive/1/418640/100/0/threaded - http://securitytracker.com/id?1015310 - http://securityreason.com/securityalert/230 - http://secunia.com/advisories/17893/ - http://pridels0.blogspot.com/2005/12/blog-system-v12-sql-inj-vuln.html - http://www.osvdb.org/21453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23430
CVE ID: CVE-2005-4050 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:49.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in multiple Multi-Tech Systems MultiVOIP devices with firmware before x.08 allows remote attackers to execute arbitrary code via a long INVITE field in a Session Initiation Protocol (SIP) packet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23416 - http://securitytracker.com/id?1015314 - http://www.securitylab.net/research/2005/12/buffer_overflow_in_multitech_v.html - http://www.securityfocus.com/bid/15711 - http://www.vupen.com/english/ad
h/2005/12/buffer_overflow_in_multitech_v.html - http://www.securityfocus.com/bid/15711 - http://www.vupen.com/english/advisories/2005/2781 - http://www.securityfocus.com/archive/1/418653/100/0/threaded - http://secunia.com/advisories/17852 - http://securityreason.com/securityalert/231
CVE ID: CVE-2005-4051 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:48.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: e107 0.6174 allows remote attackers to vote multiple times for a download via repeated requests to rate.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15748 - http://e107.org/e107_plugins/bugtrack/bugtrack.php?1625.show - http://www.securityfocus.com/archive/1/418577/100/0/threaded - http://secunia.com/advisories/17890/
CVE ID: CVE-2005-4052 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:48.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: e107 0.6174 allows remote attackers to redirect users to other web sites via the download parameter in rate.php, which is used after a user submits a file download rating. NOTE: in the default installation, the e_BASE variable restricts the redirection to the same web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/418577/100/0/threaded - http://securityreason.com/securityalert/229 - http://secunia.com/advisories/17890/
CVE ID: CVE-2005-4053 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:48.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in coWiki 0.3.4 allows remote attackers to inject arbitrary web script or HTML via the q parameter, as demonstrated using 26.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25393 - http://secunia.com/advisories/17913 - http://cowiki.tigris.org/issues/show_bug.cgi?id=234 - http://www.vupen.com/english/advisories/2005/2765 - http://pridels0.blogspot.com/2005/12/cowiki-034-xss-vuln.html - http://www.securityfocus.com/archive/1/477253/
05/2765 - http://pridels0.blogspot.com/2005/12/cowiki-034-xss-vuln.html - http://www.securityfocus.com/archive/1/477253/100/0/threaded - http://websecurity.com.ua/1131/ - http://securityvulns.ru/Rdocument692.html
CVE ID: CVE-2005-4054 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:49.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in PluggedOut Blog 1.9.5 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) categoryid, (2) entryid, (3) year, (4) month, and (5) day parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21480 - http://pridels0.blogspot.com/2005/12/pluggedout-blog-sql-vuln.html - http://secunia.com/advisories/17911 - http://www.securityfocus.com/bid/15746 - http://www.vupen.com/english/advisories/2005/2750
CVE ID: CVE-2005-4055 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:48.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Cars Portal 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) page and (2) car parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15747 - http://secunia.com/advisories/17914 - http://www.vupen.com/english/advisories/2005/2747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23428 - http://www.osvdb.org/21482 - http://pridels0.blogspot.com/2005/12/cars-portal-v1x-sql-injection.html
CVE ID: CVE-2005-4056 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:48.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the (1) Location, (2) Last Name, and (3) First Name parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/pluggedout-nexus-sqlxss-vuln_06.html - http://www.securityfocus.com/bid/15724 - http://www.vupen.com/english/advisories/2005/2751 - http://www.osvdb.org/21478 - http://secunia.com/advisories/17909
CVE ID: CVE-2005-4057 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:48.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to inject arbitrary web script or HTML via the (1) Location, (2) Last Name, and (3) First Name parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/pluggedout-nexus-sqlxss-vuln_06.html - http://www.securityfocus.com/bid/15724 - http://www.vupen.com/english/advisories/2005/2751 - http://www.osvdb.org/21479 - http://secunia.com/advisories/17909
CVE ID: CVE-2005-4058 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:48.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in saralblog 1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to viewprofile.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23484 - http://pridels0.blogspot.com/2005/12/saralblog-v1-sql-inj-vuln.html - http://www.vupen.com/english/advisories/2005/2752 - http://evuln.com/vulns/40/summary.html
CVE ID: CVE-2005-4059 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:48.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to execute arbitrary SQL commands via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21531 - http://www.vupen.com/english/advisories/2005/2756 - http://pridels0.blogspot.com/2005/12/locazolist-classifieds-v103c-vuln.html - http://www.securityfocus.com/bid/15812 - http://locazo.net:81/applications/