Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-4287 State: PUBLISHED Published: 2005-12-16T11:00:00 Last Updated: 2024-08-07T23:38:51.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via the page parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15877 - http://www.osvdb.org/21903 - http://www.securityfocus.com/archive/1/419587/100/0/threaded - http://securityreason.com/securityalert/263
CVE ID: CVE-2005-4288 State: PUBLISHED Published: 2005-12-16T11:00:00 Last Updated: 2024-08-07T23:38:51.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in MarmaraWeb E-commerce allows remote attackers to inject arbitrary web script or HTML via the page parameter to index.php. NOTE: this might be resultant from CVE-2005-4287. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/419588/100/0/threaded - http://www.osvdb.org/21902 - http://securityreason.com/securityalert/264 - http://www.securityfocus.com/bid/15875
CVE ID: CVE-2005-4289 State: PUBLISHED Published: 2005-12-16T11:00:00 Last Updated: 2024-08-07T23:38:51.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EDCstore.pl in eDatCat 0.3 allows remote attackers to inject arbitrary web script or HTML via the user_action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15889 - http://pridels0.blogspot.com/2005/12/edatcat-xss-vuln.html
CVE ID: CVE-2005-4290 State: PUBLISHED Published: 2005-12-16T11:00:00 Last Updated: 2024-08-07T23:38:51.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) kword, (2) max, (3) min, (4) comp, and (5) f parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/ecw-cart-xss-vuln.html - http://www.securityfocus.com/bid/15890 - http://secunia.com/advisories/18025 - http://www.osvdb.org/21715 - http://www.vupen.com/english/advisories/2005/2925
CVE ID: CVE-2005-4291 State: PUBLISHED Published: 2005-12-16T11:00:00 Last Updated: 2024-08-07T23:38:51.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cart.cgi in ECTOOLS Onlineshop 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) product, (2) category, and (3) uid parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21731 - http://www.vupen.com/english/advisories/2005/2919 - http://pridels0.blogspot.com/2005/12/ectools-onlineshop-xss.html - http://secunia.com/advisories/18028 - http://www.securityfocus.com/bid/15891
CVE ID: CVE-2005-4292 State: PUBLISHED Published: 2005-12-16T11:00:00 Last Updated: 2024-08-07T23:38:51.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CommerceSQL 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keywords parameter in the Quick Find feature. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21717 - http://www.vupen.com/english/advisories/2005/2920 - http://secunia.com/advisories/17932 - http://www.securityfocus.com/bid/15888 - http://pridels0.blogspot.com/2005/12/commercesql-xss-vuln.html
CVE ID: CVE-2005-4293 State: PUBLISHED Published: 2005-12-16T11:00:00 Last Updated: 2024-08-07T23:38:51.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cp-app.cgi in ClickCartPro (CCP) 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the affl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21716 - http://www.clickcartpro.com/forum/index.php?showtopic=12172 - http://pridels0.blogspot.com/2005/12/clickcartpro-ccp-xss-vuln.html - http://secunia.com/advisories/17927 - http://www.attrition.org/pipermail/vim/2006-January/000510.html - http://www.securityfoc
/secunia.com/advisories/17927 - http://www.attrition.org/pipermail/vim/2006-January/000510.html - http://www.securityfocus.com/bid/15896 - http://www.vupen.com/english/advisories/2005/2914
CVE ID: CVE-2005-4294 State: PUBLISHED Published: 2005-12-16T11:00:00 Last Updated: 2024-08-07T23:38:51.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the username in the login page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18046 - http://www.vupen.com/english/advisories/2005/2923 - http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=1910 - http://www.securityfocus.com/bid/15882 - http://www.opencms.org/opencms/en/download/opencms.html - http://archives.neohapsis.com/archives/fulldisclosur
d/15882 - http://www.opencms.org/opencms/en/download/opencms.html - http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0640.html - http://securitytracker.com/id?1015365
CVE ID: CVE-2005-4295 State: PUBLISHED Published: 2005-12-16T11:00:00 Last Updated: 2024-08-07T23:38:51.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.x allows remote attackers to inject arbitrary web script or HTML via the text parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18712 - http://www.vupen.com/english/advisories/2005/2922 - http://secunia.com/advisories/18065
CVE ID: CVE-2005-4296 State: PUBLISHED Published: 2005-12-16T11:00:00Z Last Updated: 2024-09-16T17:15:15.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: AppServ Open Project 2.5.3 allows remote attackers to cause a denial of service via a large HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15851
CVE ID: CVE-2005-4297 State: PUBLISHED Published: 2005-12-16T23:00:00 Last Updated: 2024-08-07T23:38:51.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in bbBoard 2.56 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly via the "keys" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15884 - http://www.vupen.com/english/advisories/2005/2935 - http://secunia.com/advisories/18091 - http://pridels0.blogspot.com/2005/12/bbboard-v2-xss-vuln.html
CVE ID: CVE-2005-4298 State: PUBLISHED Published: 2005-12-16T23:00:00 Last Updated: 2024-08-07T23:38:51.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in atl.cgi in AtlantForum 4.02 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) sch_allsubct, (2) before, and (3) ct parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2938 - http://secunia.com/advisories/18096 - http://pridels0.blogspot.com/2005/12/atlantforum-xss-vuln.html - http://www.securityfocus.com/bid/15887
CVE ID: CVE-2005-4299 State: PUBLISHED Published: 2005-12-16T23:00:00 Last Updated: 2024-08-07T23:38:51.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in atl.cgi in Atlant Pro 4.02 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) before and (2) ct parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2934 - http://pridels0.blogspot.com/2005/12/atlant-pro-xss-vuln.html - http://www.securityfocus.com/bid/15886 - http://secunia.com/advisories/18095
CVE ID: CVE-2005-4300 State: PUBLISHED Published: 2005-12-16T23:00:00 Last Updated: 2024-08-07T23:38:51.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the lire_pop function in pop.c in libremail 1.1.0 and earlier, with compiled with the debug option, allows remote attackers to execute arbitrary code via a crafted e-mail or POP server response. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/419639/100/0/threaded - http://www.securityfocus.com/bid/15906
CVE ID: CVE-2005-4301 State: PUBLISHED Published: 2005-12-16T23:00:00 Last Updated: 2024-08-07T23:38:51.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpXplorer 0.9.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the address bar field. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2941 - http://pridels0.blogspot.com/2005/12/phpxplorer-xss-vuln.html - http://www.osvdb.org/21744 - http://secunia.com/advisories/18080 - http://www.securityfocus.com/bid/15914
CVE ID: CVE-2005-4302 State: PUBLISHED Published: 2005-12-17T00:00:00 Last Updated: 2024-08-07T23:38:51.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to include arbitrary local files via ".." sequences in the p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15908 - http://pridels0.blogspot.com/2005/12/ezdatabase-vuln.html - http://secunia.com/advisories/18043 - http://www.osvdb.org/21796 - http://www.vupen.com/english/advisories/2005/2942
CVE ID: CVE-2005-4303 State: PUBLISHED Published: 2005-12-17T00:00:00 Last Updated: 2024-08-07T23:38:51.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the db_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15908 - http://www.osvdb.org/21797 - http://pridels0.blogspot.com/2005/12/ezdatabase-vuln.html
CVE ID: CVE-2005-4304 State: PUBLISHED Published: 2005-12-17T00:00:00 Last Updated: 2024-08-07T23:38:51.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in ezDatabase 2.1.2 and earlier allows remote attackers to obtain sensitive information via an invalid cat_id parameter, which leaks the full pathname in an error message. NOTE: these details are uncertain because the original report has terminology problems and lack of relevant details. The description is based partially on feedback comments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15908 - http://pridels0.blogspot.com/2005/12/ezdatabase-vuln.html - http://sec
ences: - http://www.securityfocus.com/bid/15908 - http://pridels0.blogspot.com/2005/12/ezdatabase-vuln.html - http://secunia.com/advisories/18043 - http://www.osvdb.org/21798
CVE ID: CVE-2005-4305 State: PUBLISHED Published: 2005-12-17T00:00:00 Last Updated: 2024-08-07T23:38:51.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200601-12.xml - http://securitytracker.com/id?1015363 - http://www.vupen.com/english/advisories/2005/2936 - http://www.securityfocus.com/bid/16386 - http://projects.edgewall.com/trac/wiki/ChangeL
m/english/advisories/2005/2936 - http://www.securityfocus.com/bid/16386 - http://projects.edgewall.com/trac/wiki/ChangeLog - https://exchange.xforce.ibmcloud.com/vulnerabilities/23775 - http://secunia.com/advisories/18048 - http://secunia.com/advisories/18625
CVE ID: CVE-2005-4306 State: PUBLISHED Published: 2005-12-17T00:00:00 Last Updated: 2024-08-07T23:38:51.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) pg, (2) tid, (3) cid, and (4) fid parameters to netboardr.cgi, or (5) cid parameter to search.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2939 - http://pridels0.blogspot.com/2005/12/sitenet-bbs-xss-vuln.html - http://www.securityfocus.com/bid/15883 - http://secunia.com/advisories/18090
CVE ID: CVE-2005-4307 State: PUBLISHED Published: 2005-12-17T00:00:00 Last Updated: 2024-08-07T23:38:51.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter to (1) forum.cgi and (2) post.cgi, or (3) the user parameter to profile.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/scarecrow-message-board-xss-vuln.html - http://www.vupen.com/english/advisories/2005/2937 - http://www.osvdb.org/21778 - http://www.osvdb.org/21777 - http://www.securityfocus.com/bid/15915 - http
ries/2005/2937 - http://www.osvdb.org/21778 - http://www.osvdb.org/21777 - http://www.securityfocus.com/bid/15915 - http://www.osvdb.org/21779 - http://secunia.com/advisories/18084
CVE ID: CVE-2005-4308 State: PUBLISHED Published: 2005-12-17T00:00:00 Last Updated: 2024-08-07T23:38:51.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in ezUpload Pro 2.2 and earlier allows remote attackers to include files via the mode parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21911 - http://www.securityfocus.com/bid/15918 - http://pridels0.blogspot.com/2005/12/ezupload-pro-vuln.html
CVE ID: CVE-2005-4309 State: PUBLISHED Published: 2005-12-17T00:00:00 Last Updated: 2024-08-07T23:38:51.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ezUpload Pro 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23785 - http://www.osvdb.org/21912 - http://www.securityfocus.com/bid/15919 - http://pridels0.blogspot.com/2005/12/ezupload-pro-vuln.html
CVE ID: CVE-2005-4310 State: PUBLISHED Published: 2005-12-17T00:00:00 Last Updated: 2024-08-07T23:38:51.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSH Tectia Server 5.0.0 (A, F, and T), when allowing host-based authentication only, allows users to log in with the wrong credentials. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18001 - http://www.ssh.com/company/newsroom/article/694/ - http://www.securityfocus.com/bid/15903 - http://www.vupen.com/english/advisories/2005/2929 - http://securitytracker.com/id?1015368
CVE ID: CVE-2005-4311 State: PUBLISHED Published: 2005-12-17T00:00:00 Last Updated: 2024-08-07T23:38:51.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via (1) the page parameter in dcboard.php and (2) unspecified search parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15885 - http://secunia.com/advisories/18093 - http://pridels0.blogspot.com/2005/12/dcforum-xss-vuln.html - http://www.vupen.com/english/advisories/2005/2940
CVE ID: CVE-2005-4312 State: PUBLISHED Published: 2005-12-17T00:00:00 Last Updated: 2024-08-07T23:38:51.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds 5.02 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/almondsoft-products-sql-inj.html - http://www.securityfocus.com/bid/15899 - http://www.osvdb.org/21783 - http://www.vupen.com/english/advisories/2005/2943 - http://secunia.com/advisories/18094
CVE ID: CVE-2005-4313 State: PUBLISHED Published: 2005-12-17T00:00:00 Last Updated: 2024-08-07T23:38:51.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in AlmondSoft Almond Personals 4.05 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/almondsoft-products-sql-inj.html - http://www.securityfocus.com/bid/15899 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50393 - http://www.osvdb.org/21783 - http://www.vupen.com/english/advisories/2005/2943 - http://secunia.com/advisories/18094
CVE ID: CVE-2005-4314 State: PUBLISHED Published: 2005-12-17T00:00:00 Last Updated: 2024-08-07T23:38:51.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) stop and (2) user parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/ppcal-shopping-cart-xss.html - http://secunia.com/advisories/18032 - http://www.securityfocus.com/bid/15892 - http://www.vupen.com/english/advisories/2005/2918
CVE ID: CVE-2005-4315 State: PUBLISHED Published: 2005-12-17T00:00:00 Last Updated: 2024-08-07T23:38:51.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the search function in Plexum PLEXCART X3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly involving the (1) s_itemname and (2) s_orderby parameters to plexcart.pl. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18033 - http://www.securityfocus.com/bid/15900 - http://pridels0.blogspot.com/2005/12/plexcart-x3-sql-inj-vuln.html - http://www.osvdb.org/21712 - http://www.vupen.com/english/advisories/2005/2924
CVE ID: CVE-2005-4316 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:51.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015361 - http://www.vupen.com/english/advisories/2005/2945 - http://www.securityfocus.com/archive/1/419594/100/0/threaded - http://www.securityfocus.com/archive/1/376490 - http://www.securityfocus.com/archive/1/419594/100
19594/100/0/threaded - http://www.securityfocus.com/archive/1/376490 - http://www.securityfocus.com/archive/1/419594/100/0/threaded - http://secunia.com/advisories/19086 - http://secunia.com/advisories/18082/ - http://www.securityfocus.com/bid/11258 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5760 - http://support.avaya.com/elmodocs2/security/ASA-2006-062.htm
CVE ID: CVE-2005-4317 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:51.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Limbo CMS 1.0.4.2 and earlier, with register_globals off, does not protect the $_SERVER variable from external modification, which allows remote attackers to use the _SERVER[REMOTE_ADDR] parameter to (1) conduct cross-site scripting (XSS) attacks in the stats module or (2) execute arbitrary code via an eval injection attack in the wrapper option in index2.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18063/ - http://www.osvdb.org/21754 - http://securitytracker.com/id?101536
: References: - http://secunia.com/advisories/18063/ - http://www.osvdb.org/21754 - http://securitytracker.com/id?1015364 - http://rgod.altervista.org/limbo1042_xpl.html - http://securityreason.com/securityalert/255 - http://www.securityfocus.com/bid/15871/ - http://www.securityfocus.com/archive/1/419470/100/0/threaded - http://www.osvdb.org/21756 - http://www.vupen.com/english/advisories/2005/2932
CVE ID: CVE-2005-4318 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:51.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Limbo CMS 1.0.4.2 and earlier, with register_globals off, allows remote attackers to execute arbitrary SQL commands via the _SERVER[REMOTE_ADDR] parameter, which modifies the underlying $_SERVER variable. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18063/ - http://www.osvdb.org/21753 - http://securitytracker.com/id?1015364 - http://rgod.altervista.org/limbo1042_xpl.html - http://securityreason.com/securityalert/255 - http://www.secur
1015364 - http://rgod.altervista.org/limbo1042_xpl.html - http://securityreason.com/securityalert/255 - http://www.securityfocus.com/bid/15871/ - http://www.securityfocus.com/archive/1/419470/100/0/threaded - http://www.vupen.com/english/advisories/2005/2932
CVE ID: CVE-2005-4319 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:51.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arbitrary PHP files via ".." sequences in the option parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18063/ - http://securitytracker.com/id?1015364 - http://rgod.altervista.org/limbo1042_xpl.html - http://securityreason.com/securityalert/255 - http://www.osvdb.org/21755 - http://www.securityfocus.com/bid/15871/ - http://www.securityfocus.com/archive/1/4194
255 - http://www.osvdb.org/21755 - http://www.securityfocus.com/bid/15871/ - http://www.securityfocus.com/archive/1/419470/100/0/threaded - http://www.vupen.com/english/advisories/2005/2932
CVE ID: CVE-2005-4320 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:51.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Limbo CMS 1.0.4.2 and earlier allows remote attackers to obtain the installation path of the application via a direct request to (1) doc.inc.php, (2) element.inc.php, and (3) node.inc.php, which leaks the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18063/ - http://www.osvdb.org/21757 - http://securitytracker.com/id?1015364 - http://www.osvdb.org/21758 - http://rgod.altervista.org/limbo1042_xpl.html - http://www.osvdb.org/21759 - http://www.securityfoc
ww.osvdb.org/21758 - http://rgod.altervista.org/limbo1042_xpl.html - http://www.osvdb.org/21759 - http://www.securityfocus.com/archive/1/419470/100/0/threaded - http://www.vupen.com/english/advisories/2005/2932