Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-1185 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ThWboard before Beta 2.8.2 allow remote attackers to inject arbitrary SQL commands via various vectors including (1) Admin-Center, (2) Announcements, (3) admin/calendar.php, and (4) showevent.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10120 - http://www.securityfocus.com/bid/8961 - http://www.osvdb.org/2758 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13583 - http://www.osvdb.org/4840 - http://www.osvdb.org/4838 - http:
tps://exchange.xforce.ibmcloud.com/vulnerabilities/13583 - http://www.osvdb.org/4840 - http://www.osvdb.org/4838 - http://sourceforge.net/project/shownotes.php?release_id=195009 - http://www.osvdb.org/4841
CVE ID: CVE-2003-1186 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in TelCondex SimpleWebServer 2.12.30210 Build3285 allows remote attackers to execute arbitrary code via a long HTTP Referer header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/342785 - http://www.securityfocus.com/bid/8925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13549 - http://www.osvdb.org/10101
CVE ID: CVE-2003-1187 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in include.php in PHPKIT 1.6.02 and 1.6.03 allows remote attackers to inject arbitrary web script or HTML via the contact_email parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13590 - http://www.securityfocus.com/bid/8960 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013139.html - http://badwebmasters.net/advisory/017/
CVE ID: CVE-2003-1188 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unichat allows remote attackers to cause a denial of service (crash) by adding extra chat characters (avatars) and logging in to a chat room, as demonstrated using duplicate ACTOR entries in u2res000.rit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13610 - http://www.securityfocus.com/archive/1/343182 - http://www.osvdb.org/2844 - http://www.securityfocus.com/bid/8962 - http://secunia.com/advisories/10163
CVE ID: CVE-2003-1189 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Nokia IPSO 3.7, configured as IP Clusters, allows remote attackers to cause a denial of service via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1007992 - http://www.securityfocus.com/bid/8928 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13539 - http://secunia.com/advisories/10083 - http://www.osvdb.org/2724
CVE ID: CVE-2003-1190 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHPRecipeBook 1.24 through 2.17 allows remote attackers to inject arbitrary web script or HTML via a recipe. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=193940 - http://www.osvdb.org/2755 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13574 - http://secunia.com/advisories/10109 - http://www.securityfocus.com/bid/8963
CVE ID: CVE-2003-1191 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: chatbox.php in e107 0.554 and 0.603 allows remote attackers to cause a denial of service (pages fail to load) via HTML in the Name field, which prevents the main.php form from being loaded. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8930 - http://www.hackingheaven.com/index.php?name=PNphpBB2&file=viewtopic&t=21 - http://archives.neohapsis.com/archives/bugtraq/2003-10/0313.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/13553 - http://secunia.com/advisories/1011
traq/2003-10/0313.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/13553 - http://secunia.com/advisories/10115 - http://www.osvdb.org/2753
CVE ID: CVE-2003-1192 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13580 - http://securitytracker.com/id?1008075 - http://www.elitehaven.net/iawebmail.txt - http://www.osvdb.org/2757 - http://www.derkeiler.com/Mailing-Lists/VulnWatch/2003-11/0001.html - http://www.securiteam.com/windowsntfocus/6B002158UQ.html - http://www.securityfocus.com/bid/8965 -
h/2003-11/0001.html - http://www.securiteam.com/windowsntfocus/6B002158UQ.html - http://www.securityfocus.com/bid/8965 - http://secunia.com/advisories/10107
CVE ID: CVE-2003-1193 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Portal DB (1) List of Values (LOVs), (2) Forms, (3) Hierarchy, and (4) XML components packages in Oracle Oracle9i Application Server 9.0.2.00 through 3.0.9.8.5 allow remote attackers to execute arbitrary SQL commands via the URL. Additional Analyst Notes: - CVE Program Container: References: - http://otn.oracle.com/deploy/security/pdf/2003alert61.pdf - http://www.securityfocus.com/archive/1/343520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13593 - http://www.securityfoc
securityfocus.com/archive/1/343520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13593 - http://www.securityfocus.com/bid/8966
CVE ID: CVE-2003-1194 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Booby .1 through 0.2.3 allows remote attackers to inject arbitrary web script or HTML via the error message. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=193878 - http://secunia.com/advisories/10110 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13557 - http://securitytracker.com/id?1008056 - http://www.securityfocus.com/bid/8932
CVE ID: CVE-2003-1195 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in getmember.asp in VieBoard 2.6 Beta 1 allows remote attackers to execute arbitrary SQL commands via the msn variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4606 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13819 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/014065.html
CVE ID: CVE-2003-1196 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewtopic.asp in VieBoard 2.6 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vienuke.com/vie/viewtopic.asp?forumid=43&id=2822&page=1 - http://www.securityfocus.com/bid/8967 - http://www.osvdb.org/2789 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13629
CVE ID: CVE-2003-1197 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php for Ledscripts.com LedForums Beta 1 allows remote attackers to inject arbitrary web script or HTML via the (1) top_message parameter or (2) topic field of a new thread. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8934 - http://www.securityfocus.com/archive/1/342913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13563 - http://secunia.com/advisories/10113 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1356
/vulnerabilities/13563 - http://secunia.com/advisories/10113 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13562
CVE ID: CVE-2003-1198 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: connection.c in Cherokee web server before 0.4.6 allows remote attackers to cause a denial of service via an HTTP POST request without a Content-Length header field. Additional Analyst Notes: - CVE Program Container: References: - http://freshmeat.net/redir/cherokee/20646/url_changelog/ChangeLog - http://www.securityfocus.com/bid/9345 - http://www.osvdb.org/3306 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14119 - http://secunia.com/advisories/10518
CVE ID: CVE-2003-1199 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MyProxy 20030629 allows remote attackers to inject arbitrary web script or HTML via the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9846 - http://secunia.com/advisories/11090 - http://www.autistici.org/fdonato/advisory/MyProxy20030629-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/15438 - http://www.osvdb.org/4202 - http://marc.info/?l=bugtraq&m=107902444305344&w=2
CVE ID: CVE-2003-1200 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon 6.5.2 through 6.8.5 allows remote attackers to execute arbitrary code via a long From parameter to Form2Raw.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14097 - http://www.osvdb.org/3255 - http://hat-squad.com/bugreport/mdaemon-raw.txt - http://secunia.com/advisories/10512 - http://www.securityfocus.com/archive/1/348454 - http://www.securityfocus.com/bid/9317 - http://marc.info/?l=bugtraq&m
- http://www.securityfocus.com/archive/1/348454 - http://www.securityfocus.com/bid/9317 - http://marc.info/?l=bugtraq&m=107936753929354&w=2
CVE ID: CVE-2003-1201 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service (segmentation fault). Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000685 - http://www.osvdb.org/17000 - http://secunia.com/advisories/11261 - http://security.gentoo.org/glsa/glsa-200403-12.xml
- http://www.osvdb.org/17000 - http://secunia.com/advisories/11261 - http://security.gentoo.org/glsa/glsa-200403-12.xml - http://www.securityfocus.com/bid/7656 - http://www.openldap.org/its/index.cgi?findid=2390 - http://secunia.com/advisories/9203 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12520
CVE ID: CVE-2003-1202 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: The checklogin function in omail.pl for omail webmail 0.98.4 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) password, (2) domainname, or (3) username. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106149679129042&w=2 - http://marc.info/?l=bugtraq&m=106132514828641&w=2 - http://secunia.com/advisories/9585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12948 - http://www.securityfocus.com/bid/8451
CVE ID: CVE-2003-1203 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T02:19:45.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php for Mambo Site Server 4.0.10 allows remote attackers to execute script on other clients via the ?option parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-03/0275.html - http://www.securityfocus.com/bid/7135 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11601
CVE ID: CVE-2003-1204 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T02:19:45.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.12 BETA and earlier allow remote attackers to execute script on other clients via (1) the link parameter in sectionswindow.php, the directory parameter in (2) gallery.php, (3) navigation.php, or (4) uploadimage.php, the path parameter in (5) view.php, (6) the choice parameter in upload.php, (7) the sitename parameter in mambosimple.php, (8) the type parameter in upload.php, or the id parameter in (9) emailarticle.php, (10) emailfaq.php, or (11) emailn
hp, (8) the type parameter in upload.php, or the id parameter in (9) emailarticle.php, (10) emailfaq.php, or (11) emailnews.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/7505 - http://www.osvdb.org/7501 - http://www.osvdb.org/7495 - http://www.osvdb.org/7502 - http://www.osvdb.org/7496 - http://www.osvdb.org/7498 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11050 - http://www.osvdb.org/7500 - http://www.securityfocus.com/bid/6571 - http://www.osvdb.org/7499 - http://www.osvdb.org/7497 - http://www.securityfocus.com/archive/1/306206 - http://www.osvdb.org/7504 - http://www.osvdb.org/7503
CVE ID: CVE-2003-1205 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T02:19:46.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service (crash) by renaming a file to the "con" MS-DOS device name. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/2378 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12838 - http://www.crob.net/studio/ftpserver/ - http://marc.info/?l=bugtraq&m=106019292611151&w=2 - http://secunia.com/advisories/9467
CVE ID: CVE-2003-1206 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T02:19:46.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service (crash) via "%s" or "%n" sequences in (1) the username during login, or other FTP commands such as (2) dir. Additional Analyst Notes: - CVE Program Container: References: - http://www.crob.net/studio/ftpserver/ - http://marc.info/?l=bugtraq&m=106019292611151&w=2 - http://secunia.com/advisories/8929 - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-08/0087.html - https://exchange.xforce.ibmcloud.com/vulne
p://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-08/0087.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/12834
CVE ID: CVE-2003-1207 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T02:19:46.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crob FTP Server 3.5.1 allows remote authenticated users to cause a denial of service (crash) via a dir command with a large number of "." characters followed by a "/*" string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10778 - http://securitytracker.com/id?1008908 - http://www.securityfocus.com/archive/1/352329 - http://www.securityfocus.com/bid/9549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15105
CVE ID: CVE-2003-1208 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T02:19:46.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session parameter to a long value, or providing long parameters to the (2) NUMTOYMINTERVAL, (3) NUMTODSINTERVAL or (4) FROM_TZ functions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15060 - http://www.kb.cert.org/vuls/id/399806 - http://www.osvdb.org/3840 - http://www.ciac.org/ciac/bulletins/o-093.shtml - http://secunia.com/adv
org/vuls/id/399806 - http://www.osvdb.org/3840 - http://www.ciac.org/ciac/bulletins/o-093.shtml - http://secunia.com/advisories/10805 - http://www.kb.cert.org/vuls/id/819126 - http://www.osvdb.org/3838 - http://www.kb.cert.org/vuls/id/240174 - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0030.html - http://www.securityfocus.com/bid/9587 - http://www.osvdb.org/3839 - http://www.kb.cert.org/vuls/id/846582 - http://www.osvdb.org/3837 - http://www.nextgenss.com/advisories/ora_numtodsinterval.txt - http://www.nextgenss.com/advisories/ora_from_tz.txt - http://www.nextgenss.com/advisories/ora_numtoyminterval.txt - http://www.nextgenss.com/advisories/ora_time_zone.txt
CVE ID: CVE-2003-1209 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T02:19:45.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Post_Method function in Monkey HTTP Daemon before 0.6.2 allows remote attackers to cause a denial of service (crash) via a POST request without a Content-Type header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7201 - http://monkeyd.sourceforge.net/Changelog.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/11650
CVE ID: CVE-2003-1210 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T02:19:45.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to the getit function or the (2) min parameter to the search function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11984 - http://www.securityfocus.com/bid/7588 - http://archives.neohapsis.com/archives/bugtraq/2003-05/0147.html
CVE ID: CVE-2003-1211 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T02:19:45.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.asp for MaxWebPortal 1.30 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the Search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7837 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12277 - http://secunia.com/advisories/8979 - http://archives.neohapsis.com/archives/bugtraq/2003-06/0048.html - http://www.osvdb.org/3281
CVE ID: CVE-2003-1212 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T02:19:45.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: MaxWebPortal 1.30 allows remote attackers to perform unauthorized actions by modifying hidden form fields, such as the (1) news, (2) lock, or (3) allmem fields in the 'start new topic' HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/12278 - http://www.securityfocus.com/bid/7837 - http://www.osvdb.org/4933 - http://secunia.com/advisories/8979 - http://archives.neohapsis.com/archives/bugtraq/2003-06/0048.html
CVE ID: CVE-2003-1213 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T02:19:45.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installation of MaxWebPortal 1.30 stores the portal database under the web document root with insecure access control, which allows remote attackers to obtain sensitive information via a direct request to database/db2000.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7837 - http://secunia.com/advisories/8979 - http://archives.neohapsis.com/archives/bugtraq/2003-06/0048.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/12279
CVE ID: CVE-2003-1214 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T02:19:46.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the server login for VisualShapers ezContents 2.02 and earlier allows remote attackers to bypass access restrictions and gain access to restricted functions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10839 - http://www.ezcontents.org/forum/viewtopic.php?t=361 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15136
CVE ID: CVE-2003-1215 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T02:19:45.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in groupcp.php for phpBB 2.0.6 and earlier allows group moderators to perform unauthorized activities via the sql_in parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107273069130885&w=2 - http://www.securityfocus.com/bid/9314 - http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=161943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14096
CVE ID: CVE-2003-1216 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T02:19:45.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php for phpBB 2.0.6 and earlier allows remote attackers to execute arbitrary SQL and gain privileges via the search_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpbb.com/phpBB/viewtopic.php?t=153818 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13867 - http://marc.info/?l=bugtraq&m=107196735102970&w=2 - http://www.securityfocus.com/bid/9122 - http://marc.info/?l=bugtraq&m=107005608726609&w=2 - http://marc.info/?l=bugtraq&m=106997132425
urityfocus.com/bid/9122 - http://marc.info/?l=bugtraq&m=107005608726609&w=2 - http://marc.info/?l=bugtraq&m=106997132425576&w=2
CVE ID: CVE-2003-1217 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-1218 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-1219 State: PUBLISHED Published: 2005-08-04T04:00:00 Last Updated: 2024-08-08T02:19:45.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the tep_href_link function in html_output.php for osCommerce before 2.2-MS3 allows remote attackers to inject arbitrary web script or HTML via the osCsid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osdir.com/ml/web.oscommerce.cvs/2003-12/msg00024.html - http://www.securityfocus.com/bid/9238 - http://www.oscommerce.com/community/bugs%2C1546 - http://www.securityfocus.com/archive/1/347831