Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-1965 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) redirect parameter to member.php, (2) to parameter to myhome.php (3) TID parameter to post.php, or (4) redirect parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15966 - http://www.securityfocus.com/bid/10214 - http://marc.info/?l=bugtraq&m=108301983206107&w=2 -
om/vulnerabilities/15966 - http://www.securityfocus.com/bid/10214 - http://marc.info/?l=bugtraq&m=108301983206107&w=2 - http://secunia.com/advisories/11481 - http://securitytracker.com/id?1009935
CVE ID: CVE-2004-1966 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) FID parameter in board.php, (2) sortorder, perpage, or id parameters in member.php, (3) forums parameter in search.php, or (4) PID or FID parameters in post.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15964 - http://www.securityfocus.com/bid/10214 - http://marc.info/?l=bugtraq&m=108301983206107
cloud.com/vulnerabilities/15964 - http://www.securityfocus.com/bid/10214 - http://marc.info/?l=bugtraq&m=108301983206107&w=2 - http://secunia.com/advisories/11481 - http://securitytracker.com/id?1009935
CVE ID: CVE-2004-1967 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3) cp_ipbans.php, (4) myhome.php, (5) post.php, or (6) moderator.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary code by including the code in an image tag or a link. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108301983206107&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15967 - http://secunia.com/advisories/11481 - http
1983206107&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15967 - http://secunia.com/advisories/11481 - http://securitytracker.com/id?1009935
CVE ID: CVE-2004-1968 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to read arbitrary messages by modifying the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15970 - http://www.securityfocus.com/bid/10217 - http://marc.info/?l=bugtraq&m=108301983206107&w=2 - http://secunia.com/advisories/11481 - http://securitytracker.com/id?1009935
CVE ID: CVE-2004-1969 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: The avatar upload capability in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to execute arbitrary script by uploading files that include scripting code such as Javascript. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10218 - http://marc.info/?l=bugtraq&m=108301983206107&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15971 - http://secunia.com/advisories/11481 - http://securitytracker.com/id?1009935
CVE ID: CVE-2004-1970 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung SmartEther SS6215S switch, and possibly other Samsung switches, allows remote attackers and local users to gain administrative access by providing the admin username followed by a password that is the maximum allowed length, then pressing the enter key after the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10219 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15973 - http://marc.info/?l=bugtraq&m=108300407424571&w=2
CVE ID: CVE-2004-1971 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to gain sensitive information via an HTTP request with an invalid (1) catid or (2) clipid parameter, which reveals the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108308660628557&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15978
CVE ID: CVE-2004-1972 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to execute arbitrary SQL code via the (1) clipid or (2) catid parameters in a viewclip, viewcat, or voteclip action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15979 - http://marc.info/?l=bugtraq&m=108308660628557&w=2 - http://www.securityfocus.com/bid/10215
CVE ID: CVE-2004-1973 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request that contains a large number of / (slash) characters, which consumes resources when DiGi converts the slashes to \ (backslash) characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10228 - http://secunia.com/advisories/11490 - http://www.osvdb.org/5702 - http://marc.info/?l=bugtraq&m=108311170018203&w=2 - http://sourceforge.net/project/shownotes.php?release_id=23
rg/5702 - http://marc.info/?l=bugtraq&m=108311170018203&w=2 - http://sourceforge.net/project/shownotes.php?release_id=234261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15987 - http://securitytracker.com/alerts/2004/Apr/1009957.html - http://www.autistici.org/fdonato/advisory/DiGiWwwServerC1-adv.txt
CVE ID: CVE-2004-1974 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (2) category.php, (3) search.php, (4) main.php, (5) viewall.php, (6) download.php, (7) email.php, (8) file.php, (9) rate.php, or (10) stats.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108311096022485&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15990
CVE ID: CVE-2004-1975 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a vulnerability that is closely related to CVE-2004-1551. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15992 - http://marc.info/?l=bugtraq&m=108311096022485&w=2 - http://www.securityfocus.com/bid/10229 - http://marc.info/?l=bugtraq&m=109613031414184&w=2
CVE ID: CVE-2004-1976 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: SMC Barricade broadband router 7008ABR and 7004VBR enable remote administration by default, which allows remote attackers to gain access by connecting to port 1900. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10232 - http://marc.info/?l=bugtraq&m=108317929931816&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020580.html - http://archives.neohapsis.com/archives/bugtraq/2004-06/0101.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15993
CVE ID: CVE-2004-1977 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: 3com NBX IP VOIP NetSet Configuration Manager allows remote attackers to cause a denial of service (crash) via a Nessus scan in safeChecks mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10240 - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0092.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16015 - http://www.secnap.net/security/20040420.html - http://marc.info/?l=bugtraq&m=108334887408554&w=2 - http://secunia.com/advisories/11504
CVE ID: CVE-2004-1978 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary HTML and web script via the text parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5747 - http://marc.info/?l=bugtraq&m=108335043825605&w=2 - http://www.securityfocus.com/bid/10251 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16023 - http://secunia.com/advisories/11535 - http://securitytracker.com/id?1010008
CVE ID: CVE-2004-1979 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in do_search.php in PROPS 0.6.1 allows remote attackers to inject arbitrary HTML or web script via the search_string parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16035 - http://www.securityfocus.com/bid/10258 - http://sourceforge.net/project/shownotes.php?group_id=29581&release_id=234433 - http://marc.info/?l=bugtraq&m=108342671616155&w=2
CVE ID: CVE-2004-1980 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in glossary.php in PROPS 0.6.1 allows remote attackers to view arbitrary files via a .. (dot dot) in (1) module or (2) format variables. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=29581&release_id=234433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16036 - http://marc.info/?l=bugtraq&m=108342671616155&w=2
CVE ID: CVE-2004-1981 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are not cleared from the image file folder. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108360413811017&w=2 - http://marc.info/?l=bugtraq&m=108671836127360&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16046
CVE ID: CVE-2004-1982 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file via carriage return characters in the subject field. Additional Analyst Notes: - CVE Program Container: References: - http://www.yabbforum.com/community/YaBB.pl?board=general%3Baction=display%3Bnum=1093133233 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16050 - http://secunia.com/advisories/12609 - http://www.securityfocus.com/bid/10263 - http://marc.info/?l=bugtraq&m=108360430703935&w=2
CVE ID: CVE-2004-1983 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: The arch_get_unmapped_area function in mmap.c in the PaX patches for Linux kernel 2.6, when Address Space Layout Randomization (ASLR) is enabled, allows local users to cause a denial of service (infinite loop) via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108420555920369&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16037 - http://pax.grsecurity.net/ - http://marc.info/?l=bugtraq&m=108360001130312&w=2 - http://security.gentoo.org/glsa/gls
7 - http://pax.grsecurity.net/ - http://marc.info/?l=bugtraq&m=108360001130312&w=2 - http://security.gentoo.org/glsa/glsa-200407-02.xml - http://www.securityfocus.com/bid/10264
CVE ID: CVE-2004-1984 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpinfo.php, (2) addpic.php, (3) config.php, (4) db_input.php, (5) displayecard.php, (6) ecard.php, (7) crop.inc.php, which reveal the full path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/6495 - http://www.osvdb.org/6500 - http://marc.info/?l=bugtraq&m=108360247732014&w=2 - http://www.osvdb.org/5756 - http://www.waraxe.us/index.
b.org/6500 - http://marc.info/?l=bugtraq&m=108360247732014&w=2 - http://www.osvdb.org/5756 - http://www.waraxe.us/index.php?modname=sa&id=26 - http://www.osvdb.org/6499 - http://securitytracker.com/id?1010001 - http://www.osvdb.org/6497 - http://www.osvdb.org/6498 - http://www.osvdb.org/6496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16039 - http://secunia.com/advisories/11524
CVE ID: CVE-2004-1985 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to inject arbitrary HTML or web script via the CPG_URL parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108360247732014&w=2 - http://www.waraxe.us/index.php?modname=sa&id=26 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16040 - http://www.osvdb.org/5757 - http://www.securityfocus.com/bid/10253 - http://secunia.com/advisories/11524
CVE ID: CVE-2004-1986 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in the startdir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16042 - http://marc.info/?l=bugtraq&m=108360247732014&w=2 - http://www.waraxe.us/index.php?modname=sa&id=26 - http://securitytracker.com/id?1010001 - http://www.osvdb.org/5758 - http://www.se
waraxe.us/index.php?modname=sa&id=26 - http://securitytracker.com/id?1010001 - http://www.osvdb.org/5758 - http://www.securityfocus.com/bid/10253 - http://secunia.com/advisories/11524
CVE ID: CVE-2004-1987 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the (1) $CONFIG['impath'] or (2) $CONFIG['jpeg_qual'] parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/index.php?modname=sa&id=26 - http://securitytracker.com/id?1010001 - http://www.osvdb.org/5759 - http://marc.info/?l=bugtraq&m=108360247732014&w=2 - http://www.securityfocus.com/bid/10253 - https:/
ww.osvdb.org/5759 - http://marc.info/?l=bugtraq&m=108360247732014&w=2 - http://www.securityfocus.com/bid/10253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16043 - http://secunia.com/advisories/11524
CVE ID: CVE-2004-1988 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPG_M_DIR to reference a URL on a remote web server that contains functions.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108360247732014&w=2 - http://www.waraxe.us/index.php?modname=sa&id=26 - http://securitytracker.com/id?1010001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16041 - http://www.sec
26 - http://securitytracker.com/id?1010001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16041 - http://www.securityfocus.com/bid/10253 - http://www.osvdb.org/5761 - http://secunia.com/advisories/11524
CVE ID: CVE-2004-1989 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEME_DIR parameter to reference a URL on a remote web server that contains user_list_info_box.inc. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108360247732014&w=2 - http://www.osvdb.org/5912 - http://www.waraxe.us/index.php?modname=sa&id=26 - http://securitytracker.com/id?1010001 - https://exchange.xforce.ibmcloud.com/v
ww.waraxe.us/index.php?modname=sa&id=26 - http://securitytracker.com/id?1010001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16041 - http://www.securityfocus.com/bid/10253 - http://secunia.com/advisories/11524
CVE ID: CVE-2004-1990 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a malformed request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10262 - http://marc.info/?l=bugtraq&m=108360629031227&w=2 - http://secunia.com/advisories/11542 - http://www.osvdb.org/5880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16047 - http://www.oliverkarow.de/resear
ttp://www.osvdb.org/5880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16047 - http://www.oliverkarow.de/research/AldosWebserverMultipleVulns.txt
CVE ID: CVE-2004-1991 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Aldo's Web Server (aweb) 1.5 allows remote attackers to view arbitrary files via a .. (dot dot) in an HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10262 - http://marc.info/?l=bugtraq&m=108360629031227&w=2 - http://secunia.com/advisories/11542 - http://www.osvdb.org/5881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16048 - http://www.oliverkarow.de/research/AldosWebserverMultipleVulns.txt
CVE ID: CVE-2004-1992 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service (crash) via a long -l parameter, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108360377119290&w=2 - http://www.osvdb.org/5546 - http://www.securityfocus.com/bid/10181 - http://www.securiteam.com/windowsntfocus/5ZP0G2KCKA.html - http://secunia.com/advisories/11430 - http://marc.info/?l=ntbugtraq&m=108359620108234&w=2 - https://exchange.xf
A.html - http://secunia.com/advisories/11430 - http://marc.info/?l=ntbugtraq&m=108359620108234&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15913 - http://securitytracker.com/id?1009869
CVE ID: CVE-2004-1993 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: The patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete, which allows remote attackers to execute arbitrary commands via shell metacharacters such as "`" (backticks) in the password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10274 - http://marc.info/?l=bugtraq&m=108377215015515&w=2 - http://secunia.com/advisories/9585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12948
CVE ID: CVE-2004-1994 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: FuseTalk 4.0 allows remote attackers to ban other users via a direct request to banning.cfm. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108377423825478&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16081 - http://secunia.com/advisories/11555 - http://www.osvdb.org/5894 - http://www.securityfocus.com/bid/10278
CVE ID: CVE-2004-1995 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Request Forgery (CSRF) vulnerability in FuseTalk 2.0 allows remote attackers to create arbitrary accounts via a link to adduser.cfm. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108377423825478&w=2 - http://securitytracker.com/id?1010080 - http://www.securityfocus.com/bid/10276 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16080 - http://www.osvdb.org/5895 - http://secunia.com/advisories/11555
CVE ID: CVE-2004-1996 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.0 allows remote attackers to inject arbitrary web script via the size tag. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108377364615934&w=2 - http://www.securityfocus.com/bid/10281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16067
CVE ID: CVE-2004-1997 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16068 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:052 - http://marc.info/?l=bugtraq&m=108377525924422&w=2 - http://www.securityfocus.com/bid/10277 - http://secunia.com/advisories/11560 - http://www.osvdb.org/5898 - http://www.erfrakon.de/proje