Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
http://www.securityfocus.com/archive/1/420441/100/0/threaded - http://www.osvdb.org/22114 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23902 - http://securityreason.com/securityalert/303 - http://securitytracker.com/id?1015423 - http://rgod.altervista.org/phpdocumentor_130rc4_incl_expl.html - http://secunia.com/advisories/18248 - http://www.osvdb.org/22115
CVE ID: CVE-2005-4594 State: PUBLISHED Published: 2006-01-01T23:00:00 Last Updated: 2024-08-07T23:53:27.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in TUGZip 3.4.0.0 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23915 - http://securityreason.com/securityalert/309 - http://secunia.com/secunia_research/2005-63/advisory/ - http://www.securityfocus.com/archive/1/420538/100/0/threaded - http://www.securityfocus.com/bid/16084 - http://www.osvdb.org/22120 - http://secunia.com/advisories/17086
CVE ID: CVE-2005-4595 State: PUBLISHED Published: 2006-01-01T23:00:00 Last Updated: 2024-08-07T23:53:27.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability (RPATH) in XnView 1.70 and NView 4.51 on Gentoo Linux allows local users to execute arbitrary code via a malicious library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=117063 - http://www.osvdb.org/22093 - http://www.osvdb.org/22094 - http://secunia.com/advisories/18235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23910 - http://www.securityfocus.com/bid/16087 - http://secunia.com/advisorie
change.xforce.ibmcloud.com/vulnerabilities/23910 - http://www.securityfocus.com/bid/16087 - http://secunia.com/advisories/18240 - http://www.gentoo.org/security/en/glsa/glsa-200512-18.xml
CVE ID: CVE-2005-4596 State: PUBLISHED Published: 2006-01-01T23:00:00 Last Updated: 2024-08-07T23:53:28.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in read.php in AdesGuestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the totalRows_rsRead parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22111 - http://secunia.com/advisories/18244 - http://pridels0.blogspot.com/2005/12/adesguestbook-xss-vuln.html - http://www.securityfocus.com/bid/16090 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23909
CVE ID: CVE-2005-4597 State: PUBLISHED Published: 2006-01-01T23:00:00 Last Updated: 2024-08-07T23:53:27.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 1.7 allows remote attackers to inject arbitrary web script or HTML via the email parameter, as used by the email field, when signing a guestbook. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/ipei-guestbook-xss-vuln.html - http://secunia.com/advisories/18241 - http://www.securityfocus.com/bid/16092 - http://www.osvdb.org/22118 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23914
CVE ID: CVE-2005-4598 State: PUBLISHED Published: 2006-01-01T23:00:00 Last Updated: 2024-08-07T23:53:28.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in home.php in OoApp Guestbook 2.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16091 - http://secunia.com/advisories/18242 - http://pridels0.blogspot.com/2005/12/ooapp-guestbook-xss-vuln.html - http://www.osvdb.org/22112
CVE ID: CVE-2005-4599 State: PUBLISHED Published: 2006-01-01T23:00:00 Last Updated: 2024-08-07T23:53:27.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to inject arbitrary web script or HTML via the index parameter. Additional Analyst Notes: - CVE Program Container: References: - http://tinymce.moxiecode.com/punbb/viewtopic.php?id=2233 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23906 - http://www.osvdb.org/22117 - http://tinymce.moxiecode.com/punbb/viewtopic.php?id=2244 - http://secunia.com/advisories/18262 - http://www.hardened-php.net/advis
ymce.moxiecode.com/punbb/viewtopic.php?id=2244 - http://secunia.com/advisories/18262 - http://www.hardened-php.net/advisory_262005.111.html - http://www.securityfocus.com/archive/1/420543/100/0/threaded - http://www.securityfocus.com/bid/16083 - http://securitytracker.com/id?1015424
CVE ID: CVE-2005-4600 State: PUBLISHED Published: 2006-01-01T23:00:00 Last Updated: 2024-08-07T23:53:27.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to read or include arbitrary files via a trailing null byte (%00) in the (1) theme, (2) language, (3) plugins, or (4) lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://tinymce.moxiecode.com/punbb/viewtopic.php?id=2233 - https://www.exploit-db.com/exploits/4441 - http://tinymce.moxiecode.com/punbb/viewtopic.php?id=2244 - http://securityreason.com/securityalert/306 - http://se
441 - http://tinymce.moxiecode.com/punbb/viewtopic.php?id=2244 - http://securityreason.com/securityalert/306 - http://secunia.com/advisories/18262 - http://www.hardened-php.net/advisory_262005.111.html - http://www.securityfocus.com/archive/1/420543/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36736 - http://www.securityfocus.com/bid/16083 - http://securitytracker.com/id?1015424 - http://www.osvdb.org/22116
CVE ID: CVE-2005-4601 State: PUBLISHED Published: 2006-01-01T23:00:00 Last Updated: 2024-08-07T23:53:27.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: The delegate code in ImageMagick 6.2.4.5-0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename that is processed by the display command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23927 - http://secunia.com/advisories/19408 - http://www.securityfocus.com/archive/1/452718/100/100/threaded - http://www.novell.com/linux/security/advisories/2006_06_sr.html - http://slackware.com/security/viewer.php?l=slackware-secu
p://www.novell.com/linux/security/advisories/2006_06_sr.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.341682 - http://www.vupen.com/english/advisories/2008/0412 - http://www.debian.org/security/2006/dsa-957 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:024 - http://www.osvdb.org/22121 - http://secunia.com/advisories/23090 - https://issues.rpath.com/browse/RPL-389 - http://secunia.com/advisories/18607 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-231321-1 - http://www.securityfocus.com/bid/16093 - http://www.ubuntu.com/usn/usn-246-1 - http://secunia.com/advisories/18871 - http://secunia.com/advisories/28800 - http
- http://www.ubuntu.com/usn/usn-246-1 - http://secunia.com/advisories/18871 - http://secunia.com/advisories/28800 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10353 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345238 - http://secunia.com/advisories/18261 - ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc - http://rhn.redhat.com/errata/RHSA-2006-0178.html - http://secunia.com/advisories/19183 - http://secunia.com/advisories/18631
CVE ID: CVE-2005-4602 State: PUBLISHED Published: 2006-01-02T00:00:00 Last Updated: 2024-08-07T23:53:28.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc/function_upload.php in MyBB before 1.0.1 allows remote attackers to execute arbitrary SQL commands via the file extension of an uploaded file attachment. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0012 - http://www.securityfocus.com/archive/1/420573/100/0/threaded - http://www.osvdb.org/22159 - http://securityreason.com/securityalert/311 - http://secunia.com/advisories/18281 - http://www.securityfocus.com/bid/16097
CVE ID: CVE-2005-4603 State: PUBLISHED Published: 2006-01-02T00:00:00 Last Updated: 2024-08-07T23:53:28.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in printthread.php in MyBB 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a thread message, which is not properly sanitized in the print view of the thread. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0012 - http://www.securityfocus.com/archive/1/420569/100/0/threaded - http://secunia.com/advisories/18281 - http://securityreason.com/securityalert/310 - http://www.osvdb.org/21601 - htt
d - http://secunia.com/advisories/18281 - http://securityreason.com/securityalert/310 - http://www.osvdb.org/21601 - http://www.securityfocus.com/bid/16096
CVE ID: CVE-2005-4604 State: PUBLISHED Published: 2006-01-02T00:00:00 Last Updated: 2024-08-07T23:53:27.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MTink in the printer-filters-utils package allows local users to execute arbitrary code via a long HOME environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18249 - http://secunia.com/advisories/18287 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:239 - http://www.securityfocus.com/bid/16095
CVE ID: CVE-2005-4605 State: PUBLISHED Published: 2006-01-03T16:00:00 Last Updated: 2024-08-07T23:53:28.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: The procfs code (proc_misc.c) in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers to read sensitive kernel memory via unspecified vectors in which a signed value is added to an unsigned value. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18788 - http://secunia.com/advisories/19038 - http://linux.bkbits.net:8080/linux-2.6/cset%4043b562ae6hJGLWZA4TNf2k-RzXnVlQ - http://www.mandriva.com/security/advisories?name=MDKSA-2006:040 - http://www.redhat.com/support/errata/
4TNf2k-RzXnVlQ - http://www.mandriva.com/security/advisories?name=MDKSA-2006:040 - http://www.redhat.com/support/errata/RHSA-2006-0101.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23811 - http://www.securityfocus.com/bid/16284 - http://linux.bkbits.net:8080/linux-2.6/gnupatch%4043b562ae6hJGLWZA4TNf2k-RzXnVlQ - http://www.novell.com/linux/security/advisories/2006_06_kernel.html - http://www.securityfocus.com/archive/1/427981/100/0/threaded - http://marc.info/?l=full-disclosure&m=113535380422339&w=2 - http://secunia.com/advisories/18510 - http://lists.suse.de/archive/suse-security-anno
disclosure&m=113535380422339&w=2 - http://secunia.com/advisories/18510 - http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8b90db0df7187a01fb7177f1f812123138f562cf - http://secunia.com/advisories/18351 - http://secunia.com/advisories/18216 - http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00014.html - http://www.debian.org/security/2006/dsa-1017 - https://usn.ubuntu.com/244-1/ - http://secunia.com/advisories/18527 - http://secunia.com/advisories/19374
CVE ID: CVE-2005-4606 State: PUBLISHED Published: 2006-01-03T22:00:00 Last Updated: 2024-08-07T23:53:28.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in check_user.asp in multiple Web Wiz products including (1) Site News 3.06 and earlier, (2) Journal 1.0 and earlier, (3) Polls 3.06 and earlier, and (4) and Database Login 1.71 and earlier allows remote attackers to execute arbitrary SQL commands via the txtUserName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/305 - http://www.vupen.com/english/advisories/2006/0007 - http://www.osvdb.org/22148 - http://secunia.com/advisories/182
305 - http://www.vupen.com/english/advisories/2006/0007 - http://www.osvdb.org/22148 - http://secunia.com/advisories/18263 - http://www.securityfocus.com/bid/16085 - http://www.securityfocus.com/archive/1/420551/100/0/threaded
CVE ID: CVE-2005-4607 State: PUBLISHED Published: 2006-01-04T00:00:00 Last Updated: 2024-08-07T23:53:27.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in BugPort 1.147 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) ids[0], (2) action, (3) report_id, (4) devWherePair[1][1], and (5) binds[0] parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23920 - http://www.vupen.com/english/advisories/2006/0009 - http://secunia.com/advisories/18282 - http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html - http
2006/0009 - http://secunia.com/advisories/18282 - http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html - http://www.securityfocus.com/bid/16123 - http://www.osvdb.org/22143
CVE ID: CVE-2005-4608 State: PUBLISHED Published: 2006-01-04T00:00:00 Last Updated: 2024-08-07T23:53:27.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in BugPort 1.147 allows remote attackers to execute arbitrary SQL commands via the (1) devWherePair[0], (2) orderBy, and (3) where parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23919 - http://www.securityfocus.com/bid/16121 - http://www.vupen.com/english/advisories/2006/0009 - http://secunia.com/advisories/18282 - http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html - http://www.osvdb.org/2214
cunia.com/advisories/18282 - http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html - http://www.osvdb.org/22142
CVE ID: CVE-2005-4609 State: PUBLISHED Published: 2006-01-04T00:00:00 Last Updated: 2024-08-07T23:53:27.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in BugPort 1.147 and earlier allows remote attackers to obtain sensitive information such as full path and system configuration via an invalid action parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23921 - http://www.vupen.com/english/advisories/2006/0009 - http://www.osvdb.org/22144 - http://secunia.com/advisories/18282 - http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html
CVE ID: CVE-2005-4610 State: PUBLISHED Published: 2006-01-04T01:00:00 Last Updated: 2024-08-07T23:53:27.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the server for Dopewars before 1.5.12, when running as an NT service, allows remote attackers to execute arbitrary code via unspecified attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18246 - http://www.securityfocus.com/bid/16104 - http://www.osvdb.org/22125 - http://sourceforge.net/project/shownotes.php?release_id=381793 - http://www.vupen.com/english/advisories/2006/0001
CVE ID: CVE-2005-4611 State: PUBLISHED Published: 2006-01-04T11:00:00 Last Updated: 2024-08-07T23:53:28.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in Free ClickBank 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the keywords parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24348 - http://www.osvdb.org/21489 - http://pridels0.blogspot.com/2005/12/free-clickbank-search-engine-sql-inj.html
CVE ID: CVE-2005-4612 State: PUBLISHED Published: 2006-01-04T11:00:00 Last Updated: 2024-08-07T23:53:28.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in VUBB alpha rc1 allow remote attackers to execute arbitrary SQL commands via the (1) f parameter to viewforum.php, (2) t parameter to viewtopic.php, and (3) view parameter to usercp.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24350 - http://www.osvdb.org/21331 - http://pridels0.blogspot.com/2005/11/vubb-forum-sql-and-xss-vuln.html - http://www.osvdb.org/21329 - http://www.osvdb.org/21330
CVE ID: CVE-2005-4613 State: PUBLISHED Published: 2006-01-04T11:00:00 Last Updated: 2024-08-07T23:53:27.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in VUBB alpha rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified fields in the user edit profile. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24353 - http://pridels0.blogspot.com/2005/11/vubb-forum-sql-and-xss-vuln.html - http://www.osvdb.org/21332
CVE ID: CVE-2005-4614 State: PUBLISHED Published: 2006-01-04T11:00:00 Last Updated: 2024-08-07T23:53:27.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in digiSHOP 3.1.17 and earlier allow remote attackers to execute arbitrary SQL commands or obtain the full installation path via (1) the c parameter in cart.php and (2) unspecified search module parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21303 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23357 - http://www.osvdb.org/21302 - http://pridels0.blogspot.com/2005/11/digi
hange.xforce.ibmcloud.com/vulnerabilities/23357 - http://www.osvdb.org/21302 - http://pridels0.blogspot.com/2005/11/digishop-3x-sql-injection-vuln.html - http://www.vupen.com/english/advisories/2005/2563
CVE ID: CVE-2005-4615 State: PUBLISHED Published: 2006-01-04T11:00:00 Last Updated: 2024-08-07T23:53:27.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in DapperDesk 3.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21315 - http://pridels0.blogspot.com/2005/11/dapperdesk-30x-page-sql-inj.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24354
CVE ID: CVE-2005-4616 State: PUBLISHED Published: 2006-01-04T11:00:00 Last Updated: 2024-08-07T23:53:28.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in iSupport 1.06 allows remote attackers to execute arbitrary SQL commands via the include_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21317 - http://pridels0.blogspot.com/2005/11/isupport-1x-includefile-sql-inj.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24356
CVE ID: CVE-2005-4617 State: PUBLISHED Published: 2006-01-04T11:00:00 Last Updated: 2024-08-07T23:53:28.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tickets.php in cSupport 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21316 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24358 - http://pridels0.blogspot.com/2005/11/csupport-pg-sql-inj.html
CVE ID: CVE-2005-4618 State: PUBLISHED Published: 2006-01-05T11:00:00 Last Updated: 2024-08-07T23:53:27.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in sysctl in the Linux Kernel 2.6 before 2.6.15 allows local users to corrupt user memory and possibly cause a denial of service via a long string, which causes sysctl to write a zero byte outside the buffer. NOTE: since the sysctl is called from a userland program that provides the argument, this might not be a vulnerability, unless a legitimate user-assisted or setuid scenario can be identified. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/git/?p=linux/kernel/git/torv
ied. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8febdd85adaa41fa1fc1cb31286210fc2cd3ed0c - http://www.mandriva.com/security/advisories?name=MDKSA-2006:040 - http://secunia.com/advisories/19369 - http://www.debian.org/security/2006/dsa-1018 - http://www.securityfocus.com/bid/16141 - http://www.vupen.com/english/advisories/2006/0035 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15 - http://secunia.com/advisories/18216 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15 - http://www.debian.org/security/2006/dsa-1017 - https://usn.ubuntu.com/244-1/ - http://secunia.com/a
6/ChangeLog-2.6.15 - http://www.debian.org/security/2006/dsa-1017 - https://usn.ubuntu.com/244-1/ - http://secunia.com/advisories/18527 - http://secunia.com/advisories/19374
CVE ID: CVE-2005-4619 State: PUBLISHED Published: 2006-01-05T11:00:00 Last Updated: 2024-08-07T23:53:28.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in phpoutsourcing Zorum Forum 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the rollid parameter in the showhtmllist method. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21372 - http://pridels0.blogspot.com/2005/11/zorum-forum-35-rollid-sql-inj-vuln.html - http://www.securityfocus.com/bid/16131
CVE ID: CVE-2005-4620 State: PUBLISHED Published: 2006-01-06T11:00:00 Last Updated: 2024-08-07T23:53:27.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in WinRAR 3.50 and earlier allows local users to execute arbitrary code via a long command-line argument. NOTE: because this program executes with the privileges of the invoking user, and because remote programs do not normally have the ability to specify a command-line argument for this program, there may not be a typical attack vector for the issue that crosses privilege boundaries. Therefore this may not be a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityf
e this may not be a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/420679/100/0/threaded - http://www.rarlab.com/rarnew.htm - http://www.securityfocus.com/data/vulnerabilities/exploits/0xletzdance.c - http://www.securityfocus.com/bid/15123
CVE ID: CVE-2005-4621 State: PUBLISHED Published: 2006-01-06T11:00:00 Last Updated: 2024-08-07T23:53:28.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the editavatar page in vBulletin 3.5.1 allows remote attackers to inject arbitrary web script or HTML via a URL in the remote avatar url field, in which the URL generates a parsing error, and possibly requiring a trailing extension such as .jpg. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16128 - http://www.osvdb.org/21373 - http://www.vbulletin.com/forum/showthread.php?t=166391 - http://pridels0.blogspot.com/2005/11/vbulletin-351
.org/21373 - http://www.vbulletin.com/forum/showthread.php?t=166391 - http://pridels0.blogspot.com/2005/11/vbulletin-351-xss-vuln.html