Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://www.redhat.com/support/errata/RHSA-2006-0144.html - http://www.redhat.com/support/errata/RHSA-2006-0101.html - http://www.securityfocus.com/bid/15527 - http://lkml.org/lkml/2005/8/3/36 - http://www.securityfocus.com/archive/1/428058/100/0/threaded - http://www.debian.org/security/2005/dsa-922 - https://usn.ubuntu.com/219-1/ - http://secunia.com/advisories/18510 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=71ae18ec690953e9ba7107c7cc44589c2cc0d9f1 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 - http://www.securityfocus.com/archive/1/428028/100/0/threaded - http
ndriva.com/security/advisories?name=MDKSA-2005:218 - http://www.securityfocus.com/archive/1/428028/100/0/threaded - http://secunia.com/advisories/17826 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://secunia.com/advisories/19252 - http://linux.bkbits.net:8080/linux-2.6/cset%4042e81864gSEM90Oun0jA8dufpM3inw
CVE ID: CVE-2005-3277 State: PUBLISHED Published: 2005-10-21T04:00:00Z Last Updated: 2024-09-17T04:19:12.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("`" or single backquote) in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different vulnerability than CVE-2002-1473. Additional Analyst Notes: - CVE Program Container: References: - http://www.frsirt.com/exploits/20051019.hpux_lpd_exec.pm.php - http://archives.neohapsis.com/archives/hp/2002-q3/0064.html - http://www.securityfocus.com/bid
19.hpux_lpd_exec.pm.php - http://archives.neohapsis.com/archives/hp/2002-q3/0064.html - http://www.securityfocus.com/bid/15136
CVE ID: CVE-2005-3278 State: PUBLISHED Published: 2005-10-23T04:00:00 Last Updated: 2024-08-07T23:10:07.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the openpsfile function in gsinterf.c for Jan Kybic BitMap Viewer (BMV) 1.2 allows local users to execute arbitrary code via a PostScript (PS) file containing a large number of pages value, which leads to a resultant buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20118 - http://secunia.com/advisories/19029 - http://felinemenace.org/advisories/bmv_advisory.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/22815 - http://www.securityfocus.com/bi
visories/bmv_advisory.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/22815 - http://www.securityfocus.com/bid/15153 - http://secunia.com/advisories/17266 - http://securitytracker.com/id?1015086 - http://www.debian.org/security/2006/dsa-981
CVE ID: CVE-2005-3279 State: PUBLISHED Published: 2005-10-23T04:00:00Z Last Updated: 2024-09-16T19:25:06.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the vgasco_printf function in Jan Kybic BitMap Viewer (BMV) 1.2, when compiled with the M_UNIX flag and running setuid, allows local users to gain privileges via a long filename in the -b command line option. Additional Analyst Notes: - CVE Program Container: References: - http://felinemenace.org/advisories/bmv_advisory.txt
CVE ID: CVE-2005-3280 State: PUBLISHED Published: 2005-10-23T04:00:00 Last Updated: 2024-08-07T23:10:07.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Paros 3.2.5 uses a default password for the "sa" account in the underlying HSQLDB database and does not restrict access to the local machine, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15141 - http://www.securityfocus.com/archive/1/423446/100/0/threaded - http://secunia.com/advisories/17089 - http://www.zone-h.com/en/advisories/read/id=8286/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22557 - http://secunia.com/a
ne-h.com/en/advisories/read/id=8286/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22557 - http://secunia.com/advisories/18626 - http://www.gentoo.org/security/en/glsa/glsa-200601-15.xml
CVE ID: CVE-2005-3281 State: PUBLISHED Published: 2005-10-23T04:00:00Z Last Updated: 2024-09-17T00:41:31.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in NukeFixes 3.1 for PHP-Nuke 7.8 allows remote attackers to include arbitrary files via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17218
CVE ID: CVE-2005-3282 State: PUBLISHED Published: 2005-10-23T04:00:00Z Last Updated: 2024-09-16T22:08:39.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Splatt Forum 3.0 to 3.2 allows remote attackers to bypass authentication via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15152
CVE ID: CVE-2005-3283 State: PUBLISHED Published: 2005-10-23T04:00:00 Last Updated: 2024-08-07T23:10:07.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TikiWiki before 1.9.1.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://tikiwiki.org/art118 - http://sourceforge.net/project/shownotes.php?release_id=364457 - http://www.vupen.com/english/advisories/2005/2176 - http://www.securityfocus.com/bid/15164 - http://securitytracker.com/id?1015087 - http://www.gentoo.org/security/en/glsa/glsa-200510-23.xml - http://secunia.com/advisorie
ecuritytracker.com/id?1015087 - http://www.gentoo.org/security/en/glsa/glsa-200510-23.xml - http://secunia.com/advisories/17363 - http://bugs.gentoo.org/show_bug.cgi?id=109858 - http://secunia.com/advisories/17279
CVE ID: CVE-2005-3284 State: PUBLISHED Published: 2005-10-23T04:00:00 Last Updated: 2024-08-07T23:10:07.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in AhnLab V3 AntiVirus V3Pro 2004 before 6.0.0.488, V3Net for Windows Server 6.0 before 6.0.0.488, and MyV3, with compressed file scanning enabled, allow remote attackers to execute arbitrary code via crafted (1) ALZ, (2) UUE, or (3) XXE archives. Additional Analyst Notes: - CVE Program Container: References: - http://global.ahnlab.com/security/security_advisory002.html - http://www.securityfocus.com/archive/1/413260 - http://www.securityfocus.com/bid/15091 - http://secunia.com/secunia_research/2005-4
securityfocus.com/archive/1/413260 - http://www.securityfocus.com/bid/15091 - http://secunia.com/secunia_research/2005-48/advisory/ - http://www.osvdb.org/19955 - http://securityreason.com/securityalert/80 - http://secunia.com/advisories/16851
CVE ID: CVE-2005-3285 State: PUBLISHED Published: 2005-10-23T04:00:00Z Last Updated: 2024-09-17T04:10:25.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in comersus_backoffice_searchItemForm.asp in Comersus BackOffice Plus allows remote attackers to inject arbitrary web script or HTML via the (1) forwardTo1, (2) forwardTo2, (3) nameFT1, or (4) nameFT2 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20032 - http://lostmon.blogspot.com/2005/10/comersus-backoffice-plus-cross-site.html - http://www.securityfocus.com/bid/15118 - http://securitytracker.com/id?1015064 - http://secunia.com/advi
oss-site.html - http://www.securityfocus.com/bid/15118 - http://securitytracker.com/id?1015064 - http://secunia.com/advisories/17219
CVE ID: CVE-2005-3286 State: PUBLISHED Published: 2005-10-23T04:00:00 Last Updated: 2024-08-07T23:10:07.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service (crash) by setting the PAGE_NOACCESS or PAGE_GUARD protection on the Page Environment Block (PEB), which triggers an exception, aka the "PEB lockout vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/78 - http://pb.specialised.info/all/adv/kerio-fwdrv-dos-adv.txt - http://www.securityfocus.com/bid/15094 - http://www.osvdb.org/19961 - http
alised.info/all/adv/kerio-fwdrv-dos-adv.txt - http://www.securityfocus.com/bid/15094 - http://www.osvdb.org/19961 - http://www.kerio.com/security_advisory.html - http://secunia.com/advisories/17155 - http://seclists.org/bugtraq/2005/Oct/166 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/037958.html
CVE ID: CVE-2005-3287 State: PUBLISHED Published: 2005-10-23T04:00:00Z Last Updated: 2024-09-16T17:15:13.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in Mailsite Express allows remote attackers to upload and possibly execute files via attachments with executable extensions such as ASPX, which are not converted to .TXT like other dangerous extensions, and which can be directly requested from the cache directory. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015063
CVE ID: CVE-2005-3288 State: PUBLISHED Published: 2005-10-23T04:00:00Z Last Updated: 2024-09-17T01:52:03.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before saving or sending the message. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015063
CVE ID: CVE-2005-3289 State: PUBLISHED Published: 2005-10-23T04:00:00 Last Updated: 2024-08-07T23:10:07.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: LSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users to corrupt /etc/passwd and possibly other system files via the trace file. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=isg1IY77624 - http://securitytracker.com/id?1015061 - http://secunia.com/advisories/17202 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY77638 - http://www.securityfocus.com/bid/15105
CVE ID: CVE-2005-3290 State: PUBLISHED Published: 2005-10-23T04:00:00 Last Updated: 2024-08-07T23:10:07.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Accelerated Mortgage Manager allows remote attackers to execute arbitrary SQL commands via the password field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15097 - http://www.osvdb.org/21581
CVE ID: CVE-2005-3291 State: PUBLISHED Published: 2005-10-23T04:00:00 Last Updated: 2024-08-07T23:10:07.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stani's Python Editor (SPE) 0.7.5 is installed with world-writable permissions, which allows local users to gain privileges by modifying executable files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17241 - http://secunia.com/advisories/17224 - http://www.gentoo.org/security/en/glsa/glsa-200510-13.xml - http://www.securityfocus.com/bid/15113
CVE ID: CVE-2005-3292 State: PUBLISHED Published: 2005-10-23T04:00:00Z Last Updated: 2024-09-17T03:33:55.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Xeobook 0.93 allow remote attackers to inject arbitrary web script or HTML via Javascript events in tages such as <b>. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15086 - http://secunia.com/advisories/17159
CVE ID: CVE-2005-3293 State: PUBLISHED Published: 2005-10-23T04:00:00 Last Updated: 2024-08-07T23:10:07.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerver 4.17 allows remote attackers to (1) obtain source code of scripts via a request with a trailing "." (dot) or (2) list directory contents via a trailing null character. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22785 - http://www.osvdb.org/20075 - http://www.securityfocus.com/bid/15135 - http://securitytracker.com/id?1015079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22786 - http://secunia.com/advisories/1
itytracker.com/id?1015079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22786 - http://secunia.com/advisories/17243
CVE ID: CVE-2005-3294 State: PUBLISHED Published: 2005-10-23T04:00:00 Last Updated: 2024-08-07T23:10:08.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Typsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote attackers to cause a denial of service (crash) by sending multiple RETR commands. NOTE: it was later reported that 1.10 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploitlabs.com/files/advisories/EXPL-A-2005-016-typsoft-ftpd.txt - http://secunia.com/advisories/17196 - http://www.osvdb.org/19992 - http://www.securityfocus.com/bid/15104 - http://www.exploit-db.com/exploits/15860
CVE ID: CVE-2005-3295 State: PUBLISHED Published: 2005-10-23T04:00:00 Last Updated: 2024-08-07T23:10:08.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP-UX B.11.23 on Itanium platforms allows local users to cause a denial of service due to a "specific stack size." Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20014 - http://secunia.com/advisories/17195 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A992 - http://www.auscert.org.au/render.html?it=5613 - http://securitytracker.com/id?1015050 - http://www.securityfocus.com/bid/15100
CVE ID: CVE-2005-3296 State: PUBLISHED Published: 2005-10-23T04:00:00 Last Updated: 2024-08-07T23:10:07.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP server in HP-UX 10.20, B.11.00, and B.11.11, allows remote attackers to list arbitrary directories as root by running the LIST command before logging in. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A410 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1472 - http://www.frsirt.com/exploits/20051019.hpux_ftpd_preauth_list.pm.php - https://oval.cisecurity.org/repository/search/
- http://www.frsirt.com/exploits/20051019.hpux_ftpd_preauth_list.pm.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A767 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A615 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1212 - http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00126.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1276 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1439 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A42
Aorg.mitre.oval%3Adef%3A1439 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A421 - http://www.securityfocus.com/bid/15138 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A438 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1029 - http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00126.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A593 - http://securitytracker.com/id?1015158
CVE ID: CVE-2005-3297 State: PUBLISHED Published: 2005-10-23T04:00:00 Last Updated: 2024-08-07T23:10:08.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in OpenWBEM on SuSE Linux 9 allow remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17176 - http://www.novell.com/linux/security/advisories/2005_60_OpenWBEM.html - http://secunia.com/advisories/17244 - http://www.securityfocus.com/bid/15121 - http://www.osvdb.org/20062 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22749
CVE ID: CVE-2005-3298 State: PUBLISHED Published: 2005-10-23T04:00:00 Last Updated: 2024-08-07T23:10:08.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in OpenWBEM on SuSE Linux 9 allow remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17176 - http://www.novell.com/linux/security/advisories/2005_60_OpenWBEM.html - http://secunia.com/advisories/17244 - http://www.securityfocus.com/bid/15121 - http://www.osvdb.org/20062 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22749
CVE ID: CVE-2005-3299 State: PUBLISHED Published: 2005-10-23T04:00:00 Last Updated: 2024-08-07T23:10:08.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $__redirect parameter, possibly involving the subform array. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-4 - http://secunia.com/advisories/17137 - http://www.gentoo.org/security/en/glsa/glsa-200510-16.xml - http://securityreason.com/securityalert/69 - http://www.securityfocus.com/bid/15053
CVE ID: CVE-2005-3300 State: PUBLISHED Published: 2005-10-23T04:00:00 Last Updated: 2024-08-07T23:10:07.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: The register_globals emulation layer in grab_globals.php for phpMyAdmin before 2.6.4-pl3 does not perform safety checks on values in the _FILES array for uploaded files, which allows remote attackers to include arbitrary files by using direct requests to library scripts that do not use grab_globals.php, then modifying certain configuration values for the theme. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_28_sr.html - http://www.novell.com/linux/security/
r: References: - http://www.novell.com/linux/security/advisories/2005_28_sr.html - http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html - http://secunia.com/advisories/17607 - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0478. - http://secunia.com/advisories/17559 - http://www.hardened-php.net/advisory_162005.73.html - http://marc.info/?l=bugtraq&m=113017591414699&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22835 - http://www.debian.org/security/2005/dsa-880 - http://secunia.com/advisories/17337 - http://www.securityfocus.com/bid/15169 - http://www.gentoo.org/security/en/glsa/glsa-200510-21.xml - http://www.phpmyadmin.net/home_page/security.
om/bid/15169 - http://www.gentoo.org/security/en/glsa/glsa-200510-21.xml - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-5 - http://secunia.com/advisories/17289/ - http://securitytracker.com/id?1015091
CVE ID: CVE-2005-3301 State: PUBLISHED Published: 2005-10-24T04:00:00 Last Updated: 2024-08-07T23:10:07.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl3 allow remote attackers to inject arbitrary web script or HTML via certain arguments to (1) left.php, (2) queryframe.php, or (3) server_databases.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_28_sr.html - http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html - http://secunia.com/advisories/17607 - http://secunia.com/advisories/17559 - http://www.vupen.c
2005_66_phpmyadmin.html - http://secunia.com/advisories/17607 - http://secunia.com/advisories/17559 - http://www.vupen.com/english/advisories/2005/2179 - http://www.debian.org/security/2005/dsa-880 - http://secunia.com/advisories/17337 - http://www.gentoo.org/security/en/glsa/glsa-200510-21.xml - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-5 - http://www.securityfocus.com/bid/15196
CVE ID: CVE-2005-3302 State: PUBLISHED Published: 2005-10-24T04:00:00 Last Updated: 2025-01-16T19:46:53.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/19754 - http://www.securityfocus.com/bid/17663 - http://www.debian.org/security/2006/dsa-1039 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330895
CVE ID: CVE-2005-3303 State: PUBLISHED Published: 2005-11-05T11:00:00 Last Updated: 2024-08-07T23:10:08.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17451 - http://www.osvdb.org/20482 - http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml - http://secunia.com/advisories/17501 - http://secunia.com/advisories/17184 - http://www.zerodayinitiative.com/advisories/ZDI-05-002.html - http://www.mandriva.com
p://secunia.com/advisories/17184 - http://www.zerodayinitiative.com/advisories/ZDI-05-002.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:205 - http://secunia.com/advisories/17559 - http://securityreason.com/securityalert/146 - http://www.securityfocus.com/bid/15318 - http://secunia.com/advisories/17448 - http://sourceforge.net/project/shownotes.php?release_id=368319 - http://www.vupen.com/english/advisories/2005/2294 - http://archives.neohapsis.com/archives/bugtraq/2005-11/0041.html - http://www.debian.org/security/2005/dsa-887 - http://secunia.com/advisories/17434 - http://securitytracker.com/id?1015154
CVE ID: CVE-2005-3304 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-07T23:10:08.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitrary PHP code via (1) the username parameter in the Your Account page, (2) the url parameter in the Downloads module, and (3) the description parameter in the Web_Links module. Additional Analyst Notes: - CVE Program Container: References: - http://rgod.altervista.org/phpnuke78sql.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/22851 - http://www.securityfocus.com/bid/15178 - http://marc.info/?l=bugt
//exchange.xforce.ibmcloud.com/vulnerabilities/22851 - http://www.securityfocus.com/bid/15178 - http://marc.info/?l=bugtraq&m=113017049702436&w=2 - http://www.osvdb.org/20293 - http://secunia.com/advisories/17315/ - http://www.osvdb.org/20292 - http://www.vupen.com/english/advisories/2005/2191 - http://www.osvdb.org/20291