Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-1381 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-08T00:46:12.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100053 - http://www.mozilla.org/security/announce/mfsa2005-05.html - https://exch
finition/oval%3Aorg.mitre.oval%3Adef%3A100053 - http://www.mozilla.org/security/announce/mfsa2005-05.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17789 - http://secunia.com/multiple_browsers_form_field_focus_test/ - http://secunia.com/advisories/12712 - http://secunia.com/multiple_browsers_dialog_box_spoofing_test/
CVE ID: CVE-2004-1382 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-08T00:46:12.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: The glibcbug script in glibc 2.3.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CVE-2004-0968. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-636 - http://www.redhat.com/support/errata/RHSA-2005-261.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:159 - http://marc.info/?l=bugtraq&m=109899903129801&w=2
CVE ID: CVE-2004-1383 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-08T00:46:12.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to execute arbitrary SQL statements via the (1) order, (2) project_id, (3) pro_main, or (4) hours_id parameters to index.php or (5) ticket_id to viewticket_details.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18498 - http://marc.info/?l=bugtraq&m=110312656029072&w=2 - http://www.gulftech.org/?node=research&article_id=00054-12142004 - http://www.securi
/?l=bugtraq&m=110312656029072&w=2 - http://www.gulftech.org/?node=research&article_id=00054-12142004 - http://www.securityfocus.com/bid/11952 - http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml
CVE ID: CVE-2004-1384 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-08T00:46:12.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) kp3, (2) type, (3) msg, (4) forum_id, (5) pos, (6) cats_app, (7) cat_id, (8) msgball[msgnum], (9) fldball[acctnum] parameters to index.php or (10) ticket_id to viewticket_details.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18496 - http://marc.info/?l=bugtraq&m=110312656029072&w=2 - http:
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18496 - http://marc.info/?l=bugtraq&m=110312656029072&w=2 - http://www.gulftech.org/?node=research&article_id=00054-12142004 - http://www.securityfocus.com/bid/11952 - http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml
CVE ID: CVE-2004-1385 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-08T00:46:12.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpGroupWare 0.9.16.003 and earlier allows remote attackers to gain sensitive information via (1) unexpected characters in the session ID such as shell metacharacters, (2) an invalid appname parameter to preferences.php or (3) an invalid menuaction parameter to index.php, which reveals the web server path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18497 - http://marc.info/?l=bugtraq&m=110312656029072&w=2 - http://www.gulftech.org/?n
orce.ibmcloud.com/vulnerabilities/18497 - http://marc.info/?l=bugtraq&m=110312656029072&w=2 - http://www.gulftech.org/?node=research&article_id=00054-12142004 - http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml
CVE ID: CVE-2004-1386 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-08T00:46:12.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: TikiWiki before 1.8.4.1 does not properly verify uploaded images, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2005-0200. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12110 - http://tikiwiki.org/tiki-read_article.php?articleId=97 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18691 - http://www.gentoo.org/security/en/glsa/glsa-200501-12.xml - http://www.ciac.org/ciac/bulletins/p-084.shtml - http://
1 - http://www.gentoo.org/security/en/glsa/glsa-200501-12.xml - http://www.ciac.org/ciac/bulletins/p-084.shtml - http://securitytracker.com/id?1012700 - http://www.osvdb.org/12628
CVE ID: CVE-2004-1387 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-08T00:46:12.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: The check_forensic script in apache-utils package 1.3.31 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18993 - http://secunia.com/advisories/13925 - http://lists.debian.org/debian-apache/2005/01/msg00076.html - https://usn.ubuntu.com/65-1/
CVE ID: CVE-2004-1388 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-08T00:46:12.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls. Additional Analyst Notes: - CVE Program Container: References: - http://lists.berlios.de/pipermail/gpsd-announce/2005-January/000018.html - http://www.digitalmunition.com/DMA%5B2005-0125a%5D.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/1907
tml - http://www.digitalmunition.com/DMA%5B2005-0125a%5D.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/19079 - http://marc.info/?l=bugtraq&m=110677341711505&w=2 - http://www.mail-archive.com/debian-bugs-closed%40lists.debian.org/msg02103.html
CVE ID: CVE-2004-1389 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-08T00:46:12.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/p-020.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17811 - http://secunia.co
www.ciac.org/ciac/bulletins/p-020.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17811 - http://secunia.com/advisories/12901/ - http://www.kb.cert.org/vuls/id/685456 - http://seer.support.veritas.com/docs/271727.htm - http://www.securityfocus.com/bid/11494
CVE ID: CVE-2004-1390 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-08T00:46:12.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument to the (1) -F, (2) name, (3) en, (4) upscript, (5) downscript, (6) retries, (7) timeout, (8) scriptdetach, (9) noscript, (10) nodetach, (11) remote_mac, or (12) local_mac flags. Additional Analyst Notes: - CVE Program Container: References: - http://www.rfdslabs.com.br/qnx-advs-01-2004.txt - http://www.securityfocus.com/bid/11104 - http://www.kb.cert.org/vuls/id/961686 - http://archives.neo
-advs-01-2004.txt - http://www.securityfocus.com/bid/11104 - http://www.kb.cert.org/vuls/id/961686 - http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17280
CVE ID: CVE-2004-1391 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-08T00:46:12.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious mount program. Additional Analyst Notes: - CVE Program Container: References: - http://www.rfdslabs.com.br/qnx-advs-01-2004.txt - http://www.securityfocus.com/bid/11105 - http://www.osvdb.org/9661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17284 - http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html -
ge.xforce.ibmcloud.com/vulnerabilities/17284 - http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html - http://www.kb.cert.org/vuls/id/577566
CVE ID: CVE-2004-1392 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-08T00:46:12.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to the curl_init function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17900 - http://www.redhat.com/support/errata/RHSA-2005-406.html - http://www.securityfocus.com/bid/11557 - http://marc.info/?l=bugtraq&m=110625060220934&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9279
traq&m=110625060220934&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9279 - https://bugzilla.fedora.us/show_bug.cgi?id=2344 - http://securitytracker.com/id?1011984 - http://marc.info/?l=bugtraq&m=109898213806099&w=2 - http://www.redhat.com/support/errata/RHSA-2005-405.html
CVE ID: CVE-2004-1393 State: PUBLISHED Published: 2005-02-08T05:00:00 Last Updated: 2024-08-08T00:46:12.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the tcsetattr function for Sun Solaris for SPARC 2.6, 7, and 8 allows local users to cause a denial of service (system hang). Additional Analyst Notes: - CVE Program Container: References: - http://www.auscert.org.au/render.html?it=3806 - http://www.kb.cert.org/vuls/id/379390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14998 - http://secunia.com/advisories/10730/ - http://www.securityfocus.com/bid/9548 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57474-1 - http://www.osvdb.org/
ww.securityfocus.com/bid/9548 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57474-1 - http://www.osvdb.org/3786
CVE ID: CVE-2004-1394 State: PUBLISHED Published: 2005-02-08T05:00:00 Last Updated: 2024-08-08T00:53:22.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains an invalid entry in the exec_attr database, which may allow local users with custom rights profiles to execute profile commands with additional privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14988 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57453-1 - http://www.auscert.org.au/render.html?it=3800 - http://secunia.com/advisories/10755
/document.do?assetkey=1-26-57453-1 - http://www.auscert.org.au/render.html?it=3800 - http://secunia.com/advisories/10755/ - http://www.securitytracker.com/id?1008893 - http://www.osvdb.org/3764 - http://www.securityfocus.com/bid/9534
CVE ID: CVE-2004-1395 State: PUBLISHED Published: 2005-02-12T05:00:00 Last Updated: 2024-08-08T00:53:22.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lithtech engine, as used in (1) Contract Jack 1.1 and earlier, (2) No one lives forever 2 1.3 and earlier, (3) Tron 2.0 1.042 and earlier, (4) F.E.A.R. (First Encounter Assault and Recon), and possibly other games, allows remote attackers to cause a denial of service (connection refused) via a UDP packet that causes recvfrom to generate a return code that causes the listening loop to exit, as demonstrated using zero byte packets or packets between 8193 and 12280 bytes, which result in conditions that are not "Operation wou
using zero byte packets or packets between 8193 and 12280 bytes, which result in conditions that are not "Operation would block." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13446/ - http://aluigi.altervista.org/adv/lithsock-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/18456 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038095.html - http://secunia.com/advisories/17317 - http://www.securityfocus.com/bid/11902 - http://marc.info/?l=bugtraq&m=110297515500671&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/029932.html
CVE ID: CVE-2004-1396 State: PUBLISHED Published: 2005-02-12T05:00:00 Last Updated: 2024-08-08T00:53:22.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Winamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service (application crash or CPU consumption) via (1) an mp4 or m4a playlist file that contains invalid tag data or (2) an invalid .nsv or .nsa file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11909 - http://www.kb.cert.org/vuls/id/372968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18467 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18466 - http://securitytracker.com/
oud.com/vulnerabilities/18467 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18466 - http://securitytracker.com/alerts/2004/Dec/1012525.html - http://forums.winamp.com/showthread.php?s=&threadid=202007 - http://marc.info/?l=full-disclosure&m=110303988101973&w=2 - http://marc.info/?l=bugtraq&m=110297310503541&w=2
CVE ID: CVE-2004-1397 State: PUBLISHED Published: 2005-02-12T05:00:00 Last Updated: 2024-08-08T00:53:22.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in UseModWiki 1.0 allows remote attackers to inject arbitrary web script or HTML via an argument to wiki.pl. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11924 - http://secunia.com/advisories/13441/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18458 - http://marc.info/?l=bugtraq&m=110305173302388&w=2
CVE ID: CVE-2004-1398 State: PUBLISHED Published: 2005-02-12T05:00:00 Last Updated: 2024-08-08T00:53:22.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in prelink.c in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via format string specifiers in the extension argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20031 - http://www.netragard.com/pdfs/research/apple-kext-tools-20060822.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/18472 - http://lists.grok.org.uk/pipermail/full-disclosur
822.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/18472 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049452.html - http://marc.info/?l=bugtraq&m=110305083706943&w=2 - http://www.securityfocus.com/bid/11926
CVE ID: CVE-2004-1399 State: PUBLISHED Published: 2005-02-12T05:00:00 Last Updated: 2024-08-08T00:53:22.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Attachment module 2.3.10 and earlier for phpBB allows remote attackers to read arbitrary files via a .. (dot dot) in the filename. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110304269031484&w=2 - http://secunia.com/advisories/13421/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18437 - http://www.securityfocus.com/bid/11893
CVE ID: CVE-2004-1400 State: PUBLISHED Published: 2005-02-12T05:00:00 Last Updated: 2024-08-08T00:53:22.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: The control panel in ASP Calendar does not require authentication to access, which allows remote attackers to gain unauthorized access via a direct request to main.asp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110304839629822&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18474 - http://www.securityfocus.com/bid/11931
CVE ID: CVE-2004-1401 State: PUBLISHED Published: 2005-02-12T05:00:00 Last Updated: 2024-08-08T00:53:22.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in verify.asp in Asp-rider allows remote attackers to execute arbitrary SQL statements and bypass authentication via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11933 - http://marc.info/?l=bugtraq&m=110305802005220&w=2 - http://secunia.com/advisories/13470/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18479
CVE ID: CVE-2004-1402 State: PUBLISHED Published: 2005-02-12T05:00:00 Last Updated: 2024-08-08T00:53:22.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via (1) the string parameter for index.php, (2) comments.php, or (3) the administrator login page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11946 - http://marc.info/?l=bugtraq&m=110314454810163&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18505
CVE ID: CVE-2004-1403 State: PUBLISHED Published: 2005-02-12T05:00:00 Last Updated: 2024-08-08T00:53:22.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in GNUBoard 3.39 and earlier allows remote attackers to execute arbitrary PHP code by modifying the doc parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11948 - http://secunia.com/advisories/13479/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18494 - http://marc.info/?l=bugtraq&m=110313585810712&w=2 - http://sir.co.kr/?doc=bbs/gnuboard.php&bo
om/vulnerabilities/18494 - http://marc.info/?l=bugtraq&m=110313585810712&w=2 - http://sir.co.kr/?doc=bbs/gnuboard.php&bo_table=pds&page=1&wr_id=1871
CVE ID: CVE-2004-1404 State: PUBLISHED Published: 2005-02-12T05:00:00 Last Updated: 2024-08-08T00:53:22.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Attachment Mod 2.3.10 module for phpBB, when used with Apache mod_mime, does not properly handle files with multiple file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13421/ - http://marc.info/?l=bugtraq&m=110321557806215&w=2 - http://www.securityfocus.com/bid/11893 - http://www.opentools.de/board/viewtopic.php?t=3590 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18438
CVE ID: CVE-2004-1405 State: PUBLISHED Published: 2005-02-12T05:00:00 Last Updated: 2024-08-08T00:53:22.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://wikipedia.sourceforge.net/ - http://www.securityfocus.com/bid/11985 - http://marc.info/?l=bugtraq&m=110321710420059&w=2 - http://secunia.com/advisories/13478/
CVE ID: CVE-2004-1406 State: PUBLISHED Published: 2005-02-12T05:00:00 Last Updated: 2024-08-08T00:53:22.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attackers to inject arbitrary SQL commands via the (1) st or (2) keywords parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18533 - http://marc.info/?l=bugtraq&m=110321654705580&w=2 - http://www.securityfocus.com/bid/11982 - http://secunia.com/advisories/13513
CVE ID: CVE-2004-1407 State: PUBLISHED Published: 2005-02-12T05:00:00 Last Updated: 2024-08-08T00:53:22.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in singapore Image Gallery Web Application 0.9.10 allow remote attackers to (1) read arbitrary files via the showThumb method for thumb.php, or (2) delete arbitrary files via admin.class.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110323479715051&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18532 - http://www.security.org.sg/vuln/singapore0910.html - htt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18532 - http://www.security.org.sg/vuln/singapore0910.html - http://www.securityfocus.com/bid/11990
CVE ID: CVE-2004-1408 State: PUBLISHED Published: 2005-02-12T05:00:00 Last Updated: 2024-08-08T00:53:22.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: The addImage method for admin.class.php in Image Gallery Web Application 0.9.10 does not properly check filenames, which allows remote attackers to upload and execute arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110323479715051&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18531 - http://www.securityfocus.com/bid/11990
CVE ID: CVE-2004-1409 State: PUBLISHED Published: 2005-02-12T05:00:00 Last Updated: 2024-08-08T00:53:22.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting vulnerabilities in Image Gallery Web Application 0.9.10 allow remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110323479715051&w=2 - http://www.securityfocus.com/bid/11990
CVE ID: CVE-2004-1410 State: PUBLISHED Published: 2005-02-12T05:00:00 Last Updated: 2024-08-08T00:53:23.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary web script via a URL, which is echoed in a popup window that displays a parsing error message, a different vulnerability than CVE-2004-1229. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13450 - http://marc.info/?l=bugtraq&m=110330741828726&w=2 - http://www.osvdb.org/12524 - http://www.securityfocus.com/bid/11998