Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
iated with an issue in Perl. Additional Analyst Notes: - CVE Program Container: References: - http://www.webmin.com/security.html - http://secunia.com/advisories/17749 - http://www.gentoo.org/security/en/glsa/glsa-200512-02.xml - http://lists.immunitysec.com/pipermail/dailydave/2005-November/002685.html - http://www.debian.org/security/2006/dsa-1199 - http://www.webmin.com/changes-1.250.html - http://secunia.com/advisories/18101 - http://www.vupen.com/english/advisories/2005/2660 - http://www.novell.com/linux/security/advisories/2005_30_sr.html - http://secunia.com/advisories/17878 - http://www.dyadsecurity.com/webmin-0001.html - http://www.securityfocus.com/archive/1/418093/100/0/threaded -
es/17878 - http://www.dyadsecurity.com/webmin-0001.html - http://www.securityfocus.com/archive/1/418093/100/0/threaded - http://www.webmin.com/uchanges-1.180.html - http://secunia.com/advisories/22556 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:223 - http://secunia.com/advisories/17942 - http://secunia.com/advisories/17817
CVE ID: CVE-2005-3913 State: PUBLISHED Published: 2005-11-30T11:00:00 Last Updated: 2024-08-07T23:31:48.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the domain alias management in Virtual Hosting Control System (VHCS) 2.4.6.2, related to "creating and deleting forwards for domain aliases," allows users to hijack the forwardings of other users. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2534 - http://secunia.com/advisories/17704 - http://vhcs.net/new/modules/news/article.php?storyid=17 - http://www.osvdb.org/21061
CVE ID: CVE-2005-3914 State: PUBLISHED Published: 2005-11-30T11:00:00 Last Updated: 2024-08-07T23:31:48.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in AFFcommerce 1.1.4 allow remote attackers to execute arbitrary SQL commands via (1) the cl parameter to SubCategory.php and the item_id parameter in (2) ItemInfo.php and (3) ItemReview.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21070 - http://www.securityfocus.com/bid/15545 - http://pridels0.blogspot.com/2005/11/affcommerce-multiple-sql-inj.html - http://secunia.com/advisories/17690 - http://www.osvdb.org/21072 - http://www.osvdb.org/21071
ce-multiple-sql-inj.html - http://secunia.com/advisories/17690 - http://www.osvdb.org/21072 - http://www.osvdb.org/21071 - http://www.vupen.com/english/advisories/2005/2550
CVE ID: CVE-2005-3915 State: PUBLISHED Published: 2005-11-30T11:00:00 Last Updated: 2024-08-07T23:31:48.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Key Exchange version 1 (IKEv1) implementation in Clavister Client Web allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17663 - http://www.clavister.com/s
l Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17663 - http://www.clavister.com/support/support_update_ISAKMP.html - http://www.vupen.com/english/advisories/2005/2566 - http://www.securityfocus.com/bid/15560
CVE ID: CVE-2005-3916 State: PUBLISHED Published: 2005-11-30T11:00:00 Last Updated: 2024-08-07T23:31:48.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in memberlist.php in WSN Forum 1.21 allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/11/wsn-forum-id-sql-injection.html - http://secunia.com/advisories/17694 - http://www.securityfocus.com/bid/15549 - http://www.osvdb.org/21068 - http://www.vupen.com/english/advisories/2005/2548
CVE ID: CVE-2005-3917 State: PUBLISHED Published: 2005-11-30T11:00:00 Last Updated: 2024-08-07T23:31:48.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in usersession in CommodityRentals 2.0 Online Rental Business Creator script allows remote attackers to execute arbitrary SQL commands via the user_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17665 - http://pridels0.blogspot.com/2005/11/commodity-rentals-2x-userid-sql-inj.html - http://www.osvdb.org/21055 - http://www.vupen.com/english/advisories/2005/2547
CVE ID: CVE-2005-3918 State: PUBLISHED Published: 2005-11-30T11:00:00 Last Updated: 2024-08-07T23:31:48.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in OvBB 0.08a allow remote attackers to execute arbitrary SQL commands via the (1) threadid parameter to thread.php and (2) userid parameter to profile.php. NOTE: the vendor disputes these issues, saying "these reports are completely unsubstantial. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21307 - http://www.securityfocus.com/bid/15566 - http://pridels0.blogspot.com/2005/11/ovbb-sql-vulnerabilities.html - http://www.osvdb.org/21308
CVE ID: CVE-2005-3919 State: PUBLISHED Published: 2005-11-30T11:00:00 Last Updated: 2024-08-07T23:31:48.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PBLang 4.65 allows remote attackers to inject arbitrary web script or HTML via multiple fields in (1) UCP.php and (2) SendPm.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/417777 - http://www.securityfocus.com/bid/15573 - http://securityreason.com/securityalert/211
CVE ID: CVE-2005-3920 State: PUBLISHED Published: 2005-11-30T11:00:00 Last Updated: 2024-08-07T23:31:48.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the (1) gal parameter to index.php or (2) id parameter to comments.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21206 - http://pridels0.blogspot.com/2005/11/babe-logger-v2-sql-inj-vuln.html - http://www.osvdb.org/21205 - http://secunia.com/advisories/17767 - http://www.securityfocus.com/bid/15580
CVE ID: CVE-2005-3921 State: PUBLISHED Published: 2005-11-30T11:00:00 Last Updated: 2024-08-07T23:31:48.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco IOS Web Server for IOS 12.0(2a) allows remote attackers to inject arbitrary web script or HTML by (1) packets containing HTML that an administrator views via an HTTP interface to the contents of memory buffers, as demonstrated by the URI /level/15/exec/-/buffers/assigned/dump; or (2) sending the router Cisco Discovery Protocol (CDP) packets with HTML payload that an administrator views via the CDP status pages. NOTE: these vectors were originally reported as being associated wi
hat an administrator views via the CDP status pages. NOTE: these vectors were originally reported as being associated with the dump and packet options in /level/15/exec/-/show/buffers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17780 - http://www.vupen.com/english/advisories/2005/2657 - http://www.cisco.com/warp/public/707/cisco-sa-20051201-http.shtml - http://secunia.com/advisories/18528 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5867 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=372 - http://www.securityfocus.com/archive/1/417916/100/0/threaded - http://securityreason.c
nerabilities/display.php?id=372 - http://www.securityfocus.com/archive/1/417916/100/0/threaded - http://securityreason.com/securityalert/227 - http://www.securityfocus.com/bid/15602 - http://securitytracker.com/id?1015275 - http://www.infohacking.com/INFOHACKING_RESEARCH/Our_Advisories/cisco/index.html - http://www.securityfocus.com/bid/16291
CVE ID: CVE-2005-3922 State: PUBLISHED Published: 2005-11-30T11:00:00 Last Updated: 2024-08-07T23:31:48.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted ZOO archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.rem0te.com/public/images/panda.pdf - http://www.vupen.com/english/advisories/2005/2666 - http://www.securityfocus.com/bid/15616 - http://secunia.com/advisories/17765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23276 - http://www.securityfocus.com/archive/1/418096/100/0/threaded - http://sec
ge.xforce.ibmcloud.com/vulnerabilities/23276 - http://www.securityfocus.com/archive/1/418096/100/0/threaded - http://securityreason.com/securityalert/216 - http://securitytracker.com/id?1015295 - http://www.osvdb.org/21256
CVE ID: CVE-2005-3923 State: PUBLISHED Published: 2005-11-30T11:00:00 Last Updated: 2024-08-07T23:31:48.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetObjects Fusion 9 (NOF9) allows remote attackers to obtain sensitive information, including passwords, by downloading the _versioning_repository_/rollbacklog.xml file, then using it to download and modify the associated ZIP file to edit and republish the site. Additional Analyst Notes: - CVE Program Container: References: - http://www.schneier.com/blog/archives/2005/11/possible_net_ob.html - http://www.vupen.com/english/advisories/2005/2555 - http://secunia.com/advisories/17667
CVE ID: CVE-2005-3924 State: PUBLISHED Published: 2005-11-30T11:00:00 Last Updated: 2024-08-07T23:31:48.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in themes/kategorie/index.php in Randshop allows remote attackers to execute arbitrary SQL commands via the (1) kategorieid and (2) katid parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17782 - http://www.osvdb.org/21213 - http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00333.html - http://www.blogcu.com/Liz0ziM/112800/ - http://securityreason.com/securityalert/213 - http://www.vupen.com/english/advisories/2005/2644 - http://www.secu
800/ - http://securityreason.com/securityalert/213 - http://www.vupen.com/english/advisories/2005/2644 - http://www.securityfocus.com/bid/15599
CVE ID: CVE-2005-3925 State: PUBLISHED Published: 2005-11-30T11:00:00 Last Updated: 2024-08-07T23:31:48.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) detail[], (2) orderdir, and (3) orderby parameters to find.php, and the (4) id parameter to issue.php. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/11/helpdesk-issue-manager-v09-sql-inj.html - http://www.osvdb.org/21114 - http://www.osvdb.org/21115 - http://www.securityfocus.com/bid/15604 - http://secuni
.html - http://www.osvdb.org/21114 - http://www.osvdb.org/21115 - http://www.securityfocus.com/bid/15604 - http://secunia.com/advisories/17714 - http://www.vupen.com/english/advisories/2005/2589
CVE ID: CVE-2005-3926 State: PUBLISHED Published: 2005-11-30T11:00:00 Last Updated: 2024-08-07T23:31:48.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via the _SERVER[REMOTE_ADDR] parameter, which is injected into a .inc script that is later included by the main script. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015279 - http://www.securityfocus.com/archive/1/417899/100/0/threaded - http://secunia.com/advisories/17790 - http://www.securityfocus.com/bid/
urityfocus.com/archive/1/417899/100/0/threaded - http://secunia.com/advisories/17790 - http://www.securityfocus.com/bid/15609 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23318 - http://rgod.altervista.org/guppy459_xpl.html - http://www.vupen.com/english/advisories/2005/2635
CVE ID: CVE-2005-3927 State: PUBLISHED Published: 2005-11-30T11:00:00 Last Updated: 2024-08-07T23:31:48.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbitrary files via (1) the meskin parameter to admin/editorTypetool.php, or the lng parameter to the in admin/inc scripts (2) archbatch.php, (3) dbbatch.php, and (4) nwlmail.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015279 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23319 - http://www.securityfocus.com/archive/1/417899/100/0/threaded - http://s
ange.xforce.ibmcloud.com/vulnerabilities/23319 - http://www.securityfocus.com/archive/1/417899/100/0/threaded - http://secunia.com/advisories/17790 - http://securityreason.com/securityalert/212 - http://www.securityfocus.com/bid/15610 - http://rgod.altervista.org/guppy459_xpl.html - http://www.vupen.com/english/advisories/2005/2635
CVE ID: CVE-2005-3928 State: PUBLISHED Published: 2005-11-30T11:00:00 Last Updated: 2024-08-07T23:31:48.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in phgrafx in QNX 6.2.1 and 6.3.0 allows local users to execute arbitrary code via a long command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/418105/100/0/threaded - http://www.securityfocus.com/bid/15619 - http://secunia.com/advisories/17781 - http://securitytracker.com/id?1015599 - http://www.vupen.com/english/advisories/2005/2669 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=384 - http://www.securityfocus.com/b
ies/2005/2669 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=384 - http://www.securityfocus.com/bid/16539
CVE ID: CVE-2005-3929 State: PUBLISHED Published: 2005-11-30T11:00:00 Last Updated: 2024-08-07T23:31:48.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the create function in xarMLSXML2PHPBackend.php in Xaraya 1.0 allows remote attackers to create directories and overwrite arbitrary files via ".." sequences in the module parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/418087/100/0/threaded - http://www.vupen.com/english/advisories/2005/2665 - http://rgod.altervista.org/xaraya1DOS.hmtl - http://secunia.com/advisories/17788 - http://securityreason.com/securityale
http://rgod.altervista.org/xaraya1DOS.hmtl - http://secunia.com/advisories/17788 - http://securityreason.com/securityalert/217 - http://www.securityfocus.com/archive/1/418191/100/0/threaded - http://www.securityfocus.com/bid/15623 - http://www.securityfocus.com/archive/1/418209/100/0/threaded
CVE ID: CVE-2005-3930 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in N-13 News 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2664 - http://www.securityfocus.com/archive/1/418092/100/0/threaded - http://www.osvdb.org/21247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23306 - http://secunia.com/advisories/17785 - http://www.securityfocus.com/bid/15643
CVE ID: CVE-2005-3931 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands via the HTTP referer. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17792 - http://securityreason.com/securityalert/218 - http://www.securityfocus.com/archive/1/418088/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/23300 - http://www.securityfocus.com/bid/15617 - http://www.vupen.com/english/advisories/2005/2663 - http://www.osvdb.org/21248
CVE ID: CVE-2005-3932 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in okiraku.php in O-Kiraku Nikki 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the day_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2668 - http://pridels0.blogspot.com/2005/11/o-kiraku-nikki-v13-sql-inj-vuln.html - http://secunia.com/advisories/17795 - http://www.osvdb.org/21268 - http://www.securityfocus.com/bid/15657
CVE ID: CVE-2005-3933 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:49.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in 88Script's Event Calendar 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17796 - http://www.osvdb.org/21269 - http://www.securityfocus.com/bid/15658 - http://www.vupen.com/english/advisories/2005/2667 - http://pridels0.blogspot.com/2005/11/88scripts-event-calendar-v20-sql-inj.html
CVE ID: CVE-2005-3934 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Symantec pcAnywhere 11.0.1, 11.5.1, and all other 32-bit versions allows remote attackers to cause a denial of service (application crash) via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17797 - http://www.symantec.com/avcenter/security/Content/2005.11.29.html - http://www.securityfocus.com/bid/15646 - http://securitytracker.com/id?1015284 - http://www.vupen.com/english/advisories/2005/2658 - https://exchange.xforce.ibmcloud.com/vulne
ytracker.com/id?1015284 - http://www.vupen.com/english/advisories/2005/2658 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23298
CVE ID: CVE-2005-3935 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) node and (2) art_id parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2640 - http://www.securityfocus.com/bid/15650 - http://secunia.com/advisories/17807 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23308 - http://pridels0.blogspot.com/2005/11/socketkb-11x-vuln.html
CVE ID: CVE-2005-3936 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP file include vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to include arbitrary local files via the __f parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17807 - http://www.osvdb.org/21251 - http://pridels0.blogspot.com/2005/11/socketkb-11x-vuln.html
CVE ID: CVE-2005-3937 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.php, or (4) profiles.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21254 - http://www.securityfocus.com/bid/15652 - http://www.osvdb.org/21252 - http://secunia.com/advisories/17808 - http://pridels0.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html - h
tp://secunia.com/advisories/17808 - http://pridels0.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html - http://www.osvdb.org/21255 - http://www.osvdb.org/21253
CVE ID: CVE-2005-3938 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the id parameter in (1) index.php, (2) faq_qanda.php, (3) refer_friend.php, (4) print_article.php, or (5) add_comment.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15653 - http://secunia.com/advisories/17809 - http://pridels0.blogspot.com/2005/11/softbiz-faq-script-multiple-sql-vuln.html - http://www.osvdb.org/21261 - http://www.osvdb.org/21258 -
ogspot.com/2005/11/softbiz-faq-script-multiple-sql-vuln.html - http://www.osvdb.org/21261 - http://www.osvdb.org/21258 - http://www.osvdb.org/21260 - http://www.osvdb.org/21257 - http://www.osvdb.org/21259
CVE ID: CVE-2005-3939 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earler allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) perpage, (3) ascdesc, and (4) orderlinks in a displaycat action in (a) index.php; and the (5) id parameter in (b) comments.php and (c) memberlist.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21262 - http://pridels0.blogspot.com/2005/11/wsn-knowledge-base-sql-inj-vuln.html - http://www.securityfocus.com/bid/15656 - http://secun
idels0.blogspot.com/2005/11/wsn-knowledge-base-sql-inj-vuln.html - http://www.securityfocus.com/bid/15656 - http://secunia.com/advisories/17810 - http://www.osvdb.org/21263 - http://www.osvdb.org/21264
CVE ID: CVE-2005-3940 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ringmaker.php in Orca Ringmaker 2.3c and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15639 - http://secunia.com/advisories/17803 - http://www.osvdb.org/21194 - http://www.vupen.com/english/advisories/2005/2651 - http://pridels0.blogspot.com/2005/11/orca-ringmaker-sql-inj-vuln.html - http://www.greywyvern.com/orca#ring
CVE ID: CVE-2005-3941 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in blog.php in Orca Blog 1.3b and earlier allows remote attackers to execute arbitrary SQL commands via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.greywyvern.com/orca#blog - http://pridels0.blogspot.com/2005/11/orca-blog-sql-inj-vuln.html - http://www.securityfocus.com/bid/15638 - http://www.vupen.com/english/advisories/2005/2656 - http://secunia.com/advisories/17804 - http://www.osvdb.org/21199