Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-2356 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-16T19:35:50.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: HAMweather 2.x allows remote attackers to modify administrative settings and obtain sensitive information via a direct request to hwadmin.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.hamweather.net/hw3/hw2securityalert.shtml - http://securitytracker.com/id?1005270 - http://www.iss.net/security_center/static/10182.php
CVE ID: CVE-2002-2357 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-17T00:21:03.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: MailEnable 1.5 015 through 1.5 018 allows remote attackers to cause a denial of service (crash) via a long USER string, possibly due to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6197 - http://www.iss.net/security_center/static/10652.php - http://archives.neohapsis.com/archives/bugtraq/2002-11/0236.html
CVE ID: CVE-2002-2358 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-16T21:56:59.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attackers to inject arbitrary web script or HTML via the title tag of an FTP URL. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/286151 - http://www.securityfocus.com/bid/5401 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0061.html - http://www.opera.com/windows/changelogs/605/?session=b2a9ea38c710788c23970ba2c9a34d47 - http://www.iss.net/sec
61.html - http://www.opera.com/windows/changelogs/605/?session=b2a9ea38c710788c23970ba2c9a34d47 - http://www.iss.net/security_center/static/9757.php
CVE ID: CVE-2002-2359 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-16T19:19:22.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote attackers to inject arbitrary web script or HTML via the title tag of an ftp URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5403 - http://bugzilla.mozilla.org/show_bug.cgi?id=154030 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0060.html - http://www.iss.net/security_center/static/9757.php
CVE ID: CVE-2002-2360 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-17T02:21:10.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to read and write to arbitrary files and execute arbitrary commands via remote_foreign_require and remote_foreign_call requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5591 - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-08/0403.html - http://www.securiteam.com/unixfocus/5CP0R1P80G.html - http://www.iss.net/security_center/static/998
/2002-08/0403.html - http://www.securiteam.com/unixfocus/5CP0R1P80G.html - http://www.iss.net/security_center/static/9983.php
CVE ID: CVE-2002-2361 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-17T01:20:44.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spoofing. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9984.php - http://cert.uni-stuttgart.de/archive/bugtraq/2002/08/msg00384.html - http://www.securityfocus.com/bid/5579
CVE ID: CVE-2002-2362 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-16T20:48:03.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in form_header.php in MyMarket 1.71 allows remote attackers to inject arbitrary web script or HTML via the noticemsg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6035 - http://www.iss.net/security_center/static/10470.php - http://www.securityfocus.com/archive/1/296861
CVE ID: CVE-2002-2363 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-16T22:35:00.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: VJE.VJE-RUN in HP-UX 11.00 adds bin to /etc/PATH, which could allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5583 - http://www.iss.net/security_center/static/9993.php - http://archives.neohapsis.com/archives/hp/2002-q3/0064.html
CVE ID: CVE-2002-2364 State: PUBLISHED Published: 2007-10-29T19:00:00Z Last Updated: 2024-09-16T17:52:52.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a help ticket. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5124 - http://www.iss.net/security_center/static/9452.php
CVE ID: CVE-2002-2365 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-17T00:42:02.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple WAIS (SWAIS) 1.11 allows remote attackers to execute arbitrary commands via the shell metacharacters in the search field, as demonstrated using the "|" (pipe) character. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-06/0390.html - http://www.securityfocus.com/bid/5127 - http://www.iss.net/security_center/static/9453.php
CVE ID: CVE-2002-2366 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-17T02:52:08.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a skin with a long colors file name in trillian.xml. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-08/0334.html - http://www.iss.net/security_center/static/9999.php - http://www.securityfocus.com/bid/5601
CVE ID: CVE-2002-2367 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-16T23:45:56.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one buffer overflow in NEC SOCKS5 1.0 r11 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hostname. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5149 - http://www.iss.net/security_center/static/9484.php - http://archives.neohapsis.com/archives/bugtraq/2002-07/0033.html
CVE ID: CVE-2002-2368 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-16T23:16:54.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username to (1) the GetString function in proxy.c for the SOCKS5 module or (2) the HandleS4Connection function in proxy.c for the SOCKS4 module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5145 - http://www.iss.net/security_center/static/9485.php - http://archives.neohapsis.com/archives/bugtraq/2002-07/0033.html - ht
tp://www.iss.net/security_center/static/9485.php - http://archives.neohapsis.com/archives/bugtraq/2002-07/0033.html - http://www.securityfocus.com/bid/5147
CVE ID: CVE-2002-2369 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-16T17:14:16.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityoffice.net/articles/liteserve/ - http://www.securityfocus.com/bid/6042 - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-10/0372.html - http://www.iss.net/security_center/static/10468.php
CVE ID: CVE-2002-2370 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-16T18:55:37.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWS web server 0.0.4, 0.0.3 and 0.1.0 allows remote attackers to cause a denial of service (crash) via a URL request that does not end with a newline. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5664 - http://www.iss.net/security_center/static/10005.php - http://archives.neohapsis.com/archives/bugtraq/2002-09/0011.html
CVE ID: CVE-2002-2371 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-16T19:50:48.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys WET11 firmware 1.31 and 1.32 allows remote attackers to cause a denial of service (crash) via a packet containing the device's hardware address as the source MAC address in the DLC header. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0045.html - http://www.securityfocus.com/bid/6046 - http://www.linksys.com/download/vertxt/WET11_fw_ver.TXT - http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00375.html - http://www.iss.net/security_cente
ET11_fw_ver.TXT - http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00375.html - http://www.iss.net/security_center/static/10472.php
CVE ID: CVE-2002-2372 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-17T02:42:44.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: The telnet server in Infoprint 21 running controller software before 1.056007 allows remote attackers to cause a denial of service (crash) via a long username, possibly due to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6047 - http://www.iss.net/security_center/static/10474.php - http://archives.neohapsis.com/archives/bugtraq/2002-10/0364.html
CVE ID: CVE-2002-2373 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-16T19:14:38.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the TCP/IP printer configuration utility in Apple LaserWriter 12/640 PS printer contains a blank Telnet password, which allows remote attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/297250 - http://www.securityfocus.com/bid/6052 - http://www.iss.net/security_center/static/10476.php
CVE ID: CVE-2002-2374 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-17T04:13:43.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors related to "unsafe use of temporary files." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5540 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-113176-01-1&searchclause=113176
CVE ID: CVE-2002-2375 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-16T16:22:31.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in CommuniGate Pro 4.0b4 and possibly earlier versions allows remote attackers to list the contents of the WebUser directory and its parent directory via a (1) .. (dot dot) or (2) . (dot) in a URL. NOTE: it is not clear whether this issue reveals any more information regarding directory structure than is already available to any CommuniGate Pro user, although there is a possibility that it could be used to infer product version information. Additional Analyst Notes: - CVE Program Container: R
ibility that it could be used to infer product version information. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-07/0016.html - http://www.iss.net/security_center/static/9463.php
CVE ID: CVE-2002-2376 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-16T17:43:58.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in E-Guest_sign.pl in E-Guest 1.1 allows remote attackers to inject arbitrary SSI directives, web script, and HTML via the (1) full name, (2) email, (3) homepage, and (4) location parameters. NOTE: this issue might overlap CVE-2005-1605. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5129 - http://archives.neohapsis.com/archives/bugtraq/2002-06/0388.html - http://www.iss.net/security_center/static/9469.php - http://www.securityfocus.co
om/archives/bugtraq/2002-06/0388.html - http://www.iss.net/security_center/static/9469.php - http://www.securityfocus.com/bid/5128 - http://www.iss.net/security_center/static/9470.php
CVE ID: CVE-2002-2377 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-16T19:52:14.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in addentry.cgi in ZAP 1.0.3 allows remote attackers to inject arbitrary SSi directives, web script, and HTML via the entry field. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/279707 - http://www.securityfocus.com/bid/5130 - http://www.iss.net/security_center/static/9471.php - http://www.securityfocus.com/bid/5131 - http://www.iss.net/security_center/static/9472.php
CVE ID: CVE-2002-2378 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-16T19:09:49.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in AN HTTP 1.41d allows remote attackers to inject arbitrary web script or HTML via a colon (:) in the query string, which is inserted into the resulting error page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6054 - http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00387.html - http://www.iss.net/security_center/static/10487.php
CVE ID: CVE-2002-2379 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-16T17:37:39.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco AS5350 IOS 12.2(11)T with access control lists (ACLs) applied and possibly with ssh running allows remote attackers to cause a denial of service (crash) via a port scan, possibly due to an ssh bug. NOTE: this issue could not be reproduced by the vendor Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/hw/univgate/ps501/products_security_notice09186a008024dba2.html - http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00413.html - http://cert.uni-stuttgart.de/archive
024dba2.html - http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00413.html - http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00420.html - http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00411.html - http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00397.html - http://www.iss.net/security_center/static/10522.php - http://www.securityfocus.com/bid/6059
CVE ID: CVE-2002-2380 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-16T17:38:04.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration menus by sniffing undocumented usernames and passwords from network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6064 - http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00416.html - http://www.iss.net/security_center/static/10498.php
CVE ID: CVE-2002-2381 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-16T23:35:26.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in (1) tetrinet_inmessage, (2) speclist_add and (3) config-getthemeinfo of GTetrinet 0.4.3 and earlier allow remote attackers to casue a denial of service and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://gtetrinet.sourceforge.net/ - http://securitytracker.com/id?1005497 - http://www.debian.org/security/2002/dsa-205 - http://www.iss.net/security_center/static/10511.php - http://www.securityfocus.com/bid/6062 - http://www.derkeiler.com/Mailing
/www.iss.net/security_center/static/10511.php - http://www.securityfocus.com/bid/6062 - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-11/0303.html
CVE ID: CVE-2002-2382 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-16T19:40:47.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6150 - http://archives.neohapsis.com/archives/freebsd/2002-11/0011.html - http://www.iss.net/security_center/static/10610.php
CVE ID: CVE-2002-2383 State: PUBLISHED Published: 2007-10-31T16:00:00 Last Updated: 2024-08-08T03:59:11.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in f2html.pl 0.1 through 0.4 allows remote attackers to execute arbitrary SQL commands via file names. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/9596 - http://www.securityfocus.com/bid/5123
CVE ID: CVE-2002-2384 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-17T01:41:54.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows local users to gain access to user accounts and steal phone service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6155 - http://www.iss.net/security_center/static/10591.php - http://archives.neohapsis.com/archives/bugtraq/2002-11/0115.html
CVE ID: CVE-2002-2385 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-17T01:12:16.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL containing a long voice phone number. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6156 - http://www.iss.net/security_center/static/10593.php - http://archives.neohapsis.com/archives/bugtraq/2002-11/0115.html
CVE ID: CVE-2002-2386 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-16T20:21:38.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Quizz module for XOOPS 1.0, when allowing on-line question development, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the SRC attribute of an IMG tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.blocus-zone.com/modules/news/article.php?storyid=180 - http://archives.neohapsis.com/archives/bugtraq/2002-11/0131.html - http://www.iss.net/security_center/static/10594.php
CVE ID: CVE-2002-2387 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-16T17:28:48.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Hyperion FTP server 2.8.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the LS command. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0069.html - http://www.iss.net/security_center/static/10599.php - http://www.mollensoft.com/news.htm
CVE ID: CVE-2002-2388 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-16T16:22:29.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in INweb POP3 mail server 2.01 allows remote attackers to cause a denial of service (crash) via a long HELO command. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10601.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0070.html
CVE ID: CVE-2002-2389 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-17T02:36:32.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: TheServer 1.74 web server stores server.ini under the web document root with insufficient access control, which allows remote attackers to obtain cleartext passwords and gain access to server log files. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9624.php - http://securitytracker.com/id?1004799 - http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000138.html - http://www.securityfocus.com/archive/1/295325 - http://www.securityfocus.com/bid/5250
CVE ID: CVE-2002-2390 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-16T20:16:17.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IDENT daemon (identd) in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long request. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-09/0224.html - http://www.securityfocus.com/bid/5733 - http://archives.neohapsis.com/archives/bugtraq/2002-09/0206.html - http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001890.html -
om/archives/bugtraq/2002-09/0206.html - http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001890.html - http://www.iss.net/security_center/static/10118.php
CVE ID: CVE-2002-2391 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-16T20:06:58.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitrary SQL commands via the roomid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-11/0136.html - http://www.iss.net/security_center/static/10606.php - http://www.securityfocus.com/bid/6165 - http://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00258.html
CVE ID: CVE-2002-2392 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-17T01:27:05.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL reference to (1) wsz and (2) wal files that contain embedded code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5266 - http://seclists.org/bugtraq/2002/Jul/0205.html - http://www.iss.net/security_center/static/9630.php