Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-1272 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-07T21:44:05.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/279774 - http://www.securityfocus.com/bid/14453 - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33239 - http://www.idefense.com/application/poi/display?id=287&type=vulnerabilities&flashstatus=t
/vulninfo/vuln.aspx?id=33239 - http://www.idefense.com/application/poi/display?id=287&type=vulnerabilities&flashstatus=true - https://exchange.xforce.ibmcloud.com/vulnerabilities/21656
CVE ID: CVE-2005-1274 State: PUBLISHED Published: 2005-04-26T04:00:00Z Last Updated: 2024-09-16T20:11:55.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via an HTTP unlock request and a long "If" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=236&type=vulnerabilities
CVE ID: CVE-2005-1275 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:05.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a PNM file with a small colors value. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:107 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10003 - http://www.securityfocus.com/bid/13351 - http://seclists.org/lists/bugtraq/2005/Apr/0407.htm
.mitre.oval%3Adef%3A10003 - http://www.securityfocus.com/bid/13351 - http://seclists.org/lists/bugtraq/2005/Apr/0407.html - http://www.overflow.pl/adv/imheapoverflow.txt - http://www.imagemagick.org/script/changelog.php - http://bugs.gentoo.org/show_bug.cgi?id=90423 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A711 - http://www.redhat.com/support/errata/RHSA-2005-413.html
CVE ID: CVE-2005-1277 State: REJECTED Published: 2005-06-26T04:00:00 Last Updated: 2005-11-02T10:00:00 Description: No description available.
CVE ID: CVE-2005-1278 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:05.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero length, as demonstrated using a GRE packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13392 - http://secunia.com/advisories/15125 - http://www.redhat.com/support/errata/RHSA-2005-421.html - http://www.securityfocus.com/archive/1/396932 - http://www.redhat.com/support/errata/RHSA-2005-417.html - http://www.securit
://www.securityfocus.com/archive/1/396932 - http://www.redhat.com/support/errata/RHSA-2005-417.html - http://www.securityfocus.com/archive/1/430292/100/0/threaded - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.60/SCOSA-2005.60.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10159 - http://secunia.com/advisories/18146
CVE ID: CVE-2005-1279 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15125 - http://secunia.com/advisories/17101 - http://www.redhat.com/support/errata/RHSA-2005-421.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ad
m/support/errata/RHSA-2005-421.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9601 - http://www.securityfocus.com/archive/1/396932 - http://www.debian.org/security/2005/dsa-850 - http://www.redhat.com/support/errata/RHSA-2005-417.html - http://www.securityfocus.com/archive/1/430292/100/0/threaded - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.60/SCOSA-2005.60.txt - http://secunia.com/advisories/18146 - http://www.securityfocus.com/bid/13389
CVE ID: CVE-2005-1280 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/396930 - http://secunia.com/advisories/15125 - http://www.redhat.com/support/errata/RHSA-2005-421.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10732 - http://www.redhat.com/support/errata/RHSA-2005-417.html - http://ww
rch/definition/oval%3Aorg.mitre.oval%3Adef%3A10732 - http://www.redhat.com/support/errata/RHSA-2005-417.html - http://www.securityfocus.com/archive/1/430292/100/0/threaded - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.60/SCOSA-2005.60.txt - http://secunia.com/advisories/18146 - http://www.securityfocus.com/bid/13390
CVE ID: CVE-2005-1281 State: PUBLISHED Published: 2005-04-26T04:00:00Z Last Updated: 2024-09-16T23:11:39.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ethereal 0.10.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/396930 - http://www.securityfocus.com/bid/13391
CVE ID: CVE-2005-1282 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the src parameter in an IMG tag, (2) User settings, or (3) Address book input boxes in the webmail interface. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111419001527077&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20225 - http://secunia.com/advisories/15100 - http://www.securityfocus.com/bid/13326
CVE ID: CVE-2005-1283 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:05.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1) read arbitrary files via the UIDL parameter to the msg script or (2) copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than CVE-2005-0367. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20229 - http://marc.info/?l=bugtraq&m=111419001527077&w=2 - https://exchange.xforce.ibmcloud.com/v
d.com/vulnerabilities/20229 - http://marc.info/?l=bugtraq&m=111419001527077&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20226 - http://www.osvdb.org/15823 - http://www.osvdb.org/15821
CVE ID: CVE-2005-1284 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP POST request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13323 - http://marc.info/?l=bugtraq&m=111419001527077&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20228 - http://www.osvdb.org/15822
CVE ID: CVE-2005-1285 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:05.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the hilight parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111420516900814&w=2 - http://securitytracker.com/id?1013790 - http://secunia.com/advisories/15058 - http://www.securityfocus.com/bid/13325
CVE ID: CVE-2005-1286 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in BitDefender 8 allows local users to prevent BitDefender from starting by creating a malicious C:\program.exe, possibly due to the lack of quoting of the full pathname when executing a process. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111420400316397&w=2 - http://www.osvdb.org/15818 - http://secunia.com/advisories/15076
CVE ID: CVE-2005-1287 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15784 - http://www.securityfocus.com/archive/1/431863/100/0/threaded - http://www.osvdb.org/15786 - http://marc.info/?l=bugtraq&m=111428133317901&w=2 - http://secunia.com/advisories/15072 - http://securitytracker.com/
- http://marc.info/?l=bugtraq&m=111428133317901&w=2 - http://secunia.com/advisories/15072 - http://securitytracker.com/id?1013793 - http://www.digitalparadox.org/advisories/bkdev.txt - http://www.osvdb.org/15785 - http://www.securityfocus.com/archive/1/431659/100/0/threaded
CVE ID: CVE-2005-1288 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: inc_login_check.asp ACS Blog 0.8 through 1.1.3 allows remote attackers to gain administrator privileges via the "in" value in a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15787 - http://securitytracker.com/id?1013795 - http://secunia.com/advisories/15105 - http://marc.info/?l=bugtraq&m=111428190921388&w=2
CVE ID: CVE-2005-1289 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and possibly (2) cat parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013780 - http://secunia.com/advisories/15054 - http://marc.info/?l=bugtraq&m=111428818425864&w=2
CVE ID: CVE-2005-1290 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) u parameter to profile.php, (2) highlight parameter to viewtopic.php, or (3) forumname or forumdesc parameters to admin_forums.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111428283721756&w=2 - http://neosecurityteam.net/Advisories/Advisory-14.txt
CVE ID: CVE-2005-1291 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) addToCart.asp or (2) productDetails.asp, the (3) priceFrom, (4) idCategory, or (5) priceTo parameter to searchResults.asp, or (6) the idParentCategory parameter to productCatalogSubCats.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15773 - http://securitytracker.com/id?1013792 - http://www.osvdb.org/15771 - http://www.osvdb.org/15772
//www.osvdb.org/15773 - http://securitytracker.com/id?1013792 - http://www.osvdb.org/15771 - http://www.osvdb.org/15772 - http://marc.info/?l=bugtraq&m=111428393022389&w=2 - http://www.osvdb.org/15774 - http://secunia.com/advisories/15055 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20246
CVE ID: CVE-2005-1292 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via the idProduct parameter to (1) tellAFriend.asp or (2) addToWishlist.asp, redirect parameter to (3) access.asp or (4) login.asp, message parameter to (5) login.asp or (6) error.asp, or (7) sku or (8) name parameter to searchResults.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013792 - http://www.osvdb.org/15776 - http://www.osvdb.org/157
m Container: References: - http://securitytracker.com/id?1013792 - http://www.osvdb.org/15776 - http://www.osvdb.org/15777 - http://www.osvdb.org/15778 - http://marc.info/?l=bugtraq&m=111428393022389&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20249 - http://www.osvdb.org/15775 - http://secunia.com/advisories/15055 - http://www.osvdb.org/15780
CVE ID: CVE-2005-1293 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in default.asp in StorePortal 2.63 allow remote attackers to execute arbitrary SQL commands via the (1) language, (2) bpic, (3) idcategory, (4) content, (5) keyword, or (6) idproduct parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111445131808328&w=2 - http://digitalparadox.org/advisories/storeportal.txt - http://secunia.com/advisories/15071
CVE ID: CVE-2005-1294 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: The affix_sock_register in the Affix Bluetooth Protocol Stack for Linux might allow local users to gain privileges via a socket call with a negative protocol value, which is used as an array index. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111445064725591&w=2 - http://www.digitalmunition.com/DMA%5B2005-0423a%5D.txt - http://affix.sourceforge.net/patch_hci_3_2_0
CVE ID: CVE-2005-1295 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111445189816161&w=2
CVE ID: CVE-2005-1296 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111445189816161&w=2
CVE ID: CVE-2005-1297 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the include.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111445189816161&w=2
CVE ID: CVE-2005-1298 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: The inserter.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111444807013846&w=2
CVE ID: CVE-2005-1299 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111444807013846&w=2
CVE ID: CVE-2005-1300 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the inserter.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111444807013846&w=2
CVE ID: CVE-2005-1301 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: nProtect:Netizen 2005.3.17.1 does not properly verify that the update module is downloaded from an authorized site, which allows remote malicious web sites to write arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111444390329376&w=2 - http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/80_e.html - http://secunia.com/advisories/15101 - http://www.osvdb.org/15788 - http://jvn.jp/jp/JVN%23AF02FB4B/index.html
CVE ID: CVE-2005-1302 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via the "change user" field. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/694 - http://www.securityfocus.com/bid/13355 - http://secunia.com/advisories/15121 - http://marc.info/?l=bugtraq&m=111444886429814&w=2 - http://www.osvdb.org/15815
CVE ID: CVE-2005-1303 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111445477910178&w=2
CVE ID: CVE-2005-1304 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: The citat.pl script allows remote attackers to execute arbitrary files via shell metacharacters in the argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111445477910178&w=2
CVE ID: CVE-2005-1305 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:44:06.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111445410220152&w=2
CVE ID: CVE-2005-1306 State: PUBLISHED Published: 2005-06-15T04:00:00 Last Updated: 2024-08-07T21:44:06.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13962 - http://www.adobe.com/support/techdocs/331710.html
CVE ID: CVE-2005-1307 State: PUBLISHED Published: 2005-05-17T04:00:00 Last Updated: 2024-08-07T21:44:06.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory to find and execute the productname.sh script, which allows local users to execute arbitrary code by copying and calling the scripts from a user-controlled directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13399 - http://www.adobe.com/support/techdocs/331621.html - http://www.osvdb.org/12297 - http://archives.neohapsis.com/archives/bugtraq/2004-12/0040.
support/techdocs/331621.html - http://www.osvdb.org/12297 - http://archives.neohapsis.com/archives/bugtraq/2004-12/0040.html - http://securitytracker.com/id?1012446 - http://www.securityfocus.com/bid/11833 - http://www.securiteam.com/exploits/5EP0D20FQC.html - http://www.osvdb.org/12298 - http://marc.info/?l=bugtraq&m=111627622403544&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18445
CVE ID: CVE-2005-1308 State: PUBLISHED Published: 2005-04-27T04:00:00Z Last Updated: 2024-09-17T03:07:18.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13374 - http://secunia.com/advisories/15119
CVE ID: CVE-2005-1309 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the (1) entry title field or (2) comment body text. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013811 - http://www.osvdb.org/15754 - http://www.osvdb.org/15755 - http://sourceforge.net/tracker/index.php?func=detail&aid=1188735&group_id=81992&atid=564683
CVE ID: CVE-2005-1310 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bBlog 0.7.4 allows remote attackers to execute arbitrary SQL commands via the postid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15756 - http://securitytracker.com/id?1013811 - http://sourceforge.net/tracker/index.php?func=detail&aid=1188735&group_id=81992&atid=564683
CVE ID: CVE-2005-1311 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Yappa-NG before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15107 - http://www.securityfocus.com/bid/13372 - http://www.osvdb.org/15828 - http://sourceforge.net/project/shownotes.php?release_id=323206