Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-1499 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Bytehoard 0.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the infolder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-10/0200.html - http://www.securityfocus.com/bid/8850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13456 - http://www.securiteam.com/unixfocus/6L00L008KE.html - http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012430.html
CVE ID: CVE-2003-1500 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in _functions.php in cpCommerce 0.5f allows remote attackers to execute arbitrary code via the prefix parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/unixfocus/6H00E2K8KG.html - http://www.securityfocus.com/bid/8851 - http://www.securityfocus.com/archive/1/341757 - http://cpcommerce.org/forums/index.php?board=2%3Baction=display%3Bthreadid=864 - http://securityreason.com/securityalert/3301 - https://exchange.xforce.ibmcloud.com/vulnera
ion=display%3Bthreadid=864 - http://securityreason.com/securityalert/3301 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13457
CVE ID: CVE-2003-1501 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the file upload CGI of Gast Arbeiter 1.3 allows remote attackers to write arbitrary files via a .. (dot dot) in the req_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/341870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13469 - http://www.securityfocus.com/bid/8858
CVE ID: CVE-2003-1502 State: PUBLISHED Published: 2007-10-25T19:00:00Z Last Updated: 2024-09-16T23:36:37.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_throttle 3.0 allows local users with Apache privileges to access shared memory that points to a file that is writable by the apache user, which could allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012043.html - http://www.securityfocus.com/bid/8822
CVE ID: CVE-2003-1503 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AOL Instant Messenger (AIM) 5.2.3292 allows remote attackers to execute arbitrary code via an aim:getfile URL with a long screen name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8825 - http://www.digitalpranksters.com/advisories/aol/AIMProtocolBO.html - http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0059.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/13443
CVE ID: CVE-2003-1504 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in variables.php in Goldlink 3.0 allows remote attackers to execute arbitrary SQL commands via the (1) vadmin_login or (2) vadmin_pass cookie in a request to goldlink.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8847 - http://securityreason.com/securityalert/3302 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13465 - http://www.securityfocus.com/archive/1/341760
CVE ID: CVE-2003-1505 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) by creating a web page or HTML e-mail with a textarea in a div element whose scrollbar-base-color is modified by a CSS style, which is then moved. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3295 - http://www.securityfocus.com/bid/8874 - http://www.securityfocus.com/archive/1/342010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13809
CVE ID: CVE-2003-1506 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the DENIEDURL parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3299 - http://www.securityfocus.com/archive/1/342160 - http://www.securityfocus.com/archive/1/342577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13507 - http://www.securityfocus.com/arc
cus.com/archive/1/342577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13507 - http://www.securityfocus.com/archive/1/342551 - http://www.securityfocus.com/bid/8876
CVE ID: CVE-2003-1507 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Planet Technology WGSD-1020 and WSW-2401 Ethernet switches use a default "superuser" account with the "planet" password, which allows remote attackers to gain administrative access. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13446 - http://www.securityfocus.com/bid/8837 - http://www.securityfocus.com/archive/1/341329 - http://securitytracker.com/id?1007924
CVE ID: CVE-2003-1508 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the user opens the minimized window, allows remote attackers to cause a denial of service (crash) via a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3303 - http://www.securityfocus.com/archive/1/342179 - http://www.irchelp.org/irchelp/mirc/exploit.html - http://www.securityfocus.com/bid/8880
CVE ID: CVE-2003-1509 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the local security zone by embedding script in a temp file before the temp file is executed by the default web browser. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/help/faq/security/securityupdate_october2003.html - http://www.securityfocus.com/bid/8839 - https://exchange.xforce.ibmcloud.com/vu
curity/securityupdate_october2003.html - http://www.securityfocus.com/bid/8839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13445
CVE ID: CVE-2003-1510 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: TinyWeb 1.9 allows remote attackers to cause a denial of service (CPU consumption) via a ".%00." in an HTTP GET request to the cgi-bin directory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13402 - http://www.securityfocus.com/bid/8810 - http://www.securiteam.com/windowsntfocus/6S0052K8LQ.html
CVE ID: CVE-2003-1511 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HTML via (1) the query string to test.txt, (2) the guestName parameter to the custMsg servlet, or (3) the cookiename parameter to the CookieExample servlet. Additional Analyst Notes: - CVE Program Container: References: - http://www.geocities.com/gzhangx/websrv/docs/security.html - http://www.securityfocus.com/bid/8841 - http://secunia.com/advisories/10023 - http://www.securityfocus
s/security.html - http://www.securityfocus.com/bid/8841 - http://secunia.com/advisories/10023 - http://www.securityfocus.com/archive/1/341452 - http://securityreason.com/securityalert/3306
CVE ID: CVE-2003-1512 State: PUBLISHED Published: 2007-10-25T19:00:00Z Last Updated: 2024-09-17T01:06:49.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in mIRC 6.1 and 6.11 allows remote attackers to cause a denial of service (crash) via a long DCC SEND request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8818
CVE ID: CVE-2003-1513 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in example scripts in Caucho Technology Resin 2.0 through 2.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) env.jsp, (2) form.jsp, (3) session.jsp, (4) the move parameter to tictactoe.jsp, or the (5) name or (6) comment fields to guestbook.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13460 - http://lists.grok.org.uk/pipermail/full-discl
ories/10031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13460 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012361.html - http://www.securityfocus.com/bid/8852
CVE ID: CVE-2003-1514 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: eMule 0.29c allows remote attackers to cause a denial of service (crash) via a long password, possibly due to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8854 - http://www.securityfocus.com/archive/1/341754 - http://securityreason.com/securityalert/3294 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13464
CVE ID: CVE-2003-1515 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Origo ASR-8100 ADSL Router 3.21 has an administration service running on port 254 that does not require a password, which allows remote attackers to cause a denial of service by restoring the factory defaults. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13463 - http://www.securityfocus.com/archive/1/341752 - http://securityreason.com/securityalert/3300 - http://www.securityfocus.com/bid/8855
CVE ID: CVE-2003-1516 State: PUBLISHED Published: 2007-10-25T19:00:00Z Last Updated: 2024-09-17T01:26:22.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, which violates the Java security model and could allow remote attackers to read or write data belonging to a signed applet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/341815 - http://www.securityfocus.com/bid/8857
CVE ID: CVE-2003-1517 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: cart.pl in Dansie shopping cart allows remote attackers to obtain the installation path via an invalid db parameter, which leaks the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/securitynews/6T00T008KG.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/13461 - http://www.securityfocus.com/bid/8860
CVE ID: CVE-2003-1518 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a long syslog message. Additional Analyst Notes: - CVE Program Container: References: - http://www.adiscon.com/Common/en/advisory/2003-09-15.asp - http://www.securityfocus.com/bid/8821 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13428 - http://www.securiteam.com/windowsntfocus/6L00F158KE.html
CVE ID: CVE-2003-1519 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Vivisimo clustering engine allows remote attackers to inject arbitrary web script or HTML via the query parameter to the search program. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1007955 - http://www.securityfocus.com/bid/8862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13452
CVE ID: CVE-2003-1520 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in FuzzyMonkey My Classifieds 2.11 allows remote attackers to execute arbitrary SQL commands via the email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/341908 - http://securityreason.com/securityalert/3293 - http://www.securityfocus.com/bid/8863 - http://www.fuzzymonkey.org/newfuzzy/software/data/03My_Classifieds_MySQL//README.html#changes
CVE ID: CVE-2003-1521 State: PUBLISHED Published: 2007-10-25T19:00:00Z Last Updated: 2024-09-16T19:50:51.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8867 - http://www.securityfocus.com/archive/1/341943
CVE ID: CVE-2003-1522 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PSCS VPOP3 Web Mail server 2.0e and 2.0f allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to the admin/index.html page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8869 - http://www.securiteam.com/windowsntfocus/6S00S008KW.html - http://www.pscs.co.uk/products/vpop3/whatsnew.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/13459
CVE ID: CVE-2003-1523 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the IMAP daemon in dbmail 1.1 allows remote attackers to execute arbitrary SQL commands via the (1) login username, (2) mailbox name, and possibly other attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13416 - http://mailman.fastxs.net/pipermail/dbmail/2003-July/003252.html - http://secunia.com/advisories/10001 - http://www.securityfocus.com/bid/8829
CVE ID: CVE-2003-1524 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: PGPi PGPDisk 6.0.2i does not unmount a PGP partition when the switch user function in Windows XP is used, which could allow local users to access data on another user's PGP partition. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13490 - http://www.securiteam.com/windowsntfocus/6M00L0K8KI.html
CVE ID: CVE-2003-1525 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in My Photo Gallery 3.5, and possibly earlier versions, has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13498 - http://www.fuzzymonkey.org/newfuzzy/software/perl/photo/README.html - http://www.securityfocus.com/bid/8872
CVE ID: CVE-2003-1526 State: PUBLISHED Published: 2007-10-25T19:00:00Z Last Updated: 2024-09-17T03:32:33.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) ", (2) ', or (3) > in the search field, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8848 - http://www.securityfocus.com/archive/1/341743
CVE ID: CVE-2003-1527 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-17T03:07:45.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlackICE Defender 2.9.cap and Server Protection 3.5.cdf, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/294411 - http://www.securityfocus.com/bid/5917 - http://www.iss.net/security_center/static/10314.php
CVE ID: CVE-2003-1528 State: PUBLISHED Published: 2007-11-08T18:00:00 Last Updated: 2024-08-08T02:35:16.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: nsr_shutdown in Fujitsu Siemens NetWorker 6.0 allows local users to overwrite arbitrary files via a symlink attack on the nsrsh[PID] temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3353 - http://www.securityfocus.com/bid/9446 - http://www.securitytracker.com/id?1008801 - http://www.securityfocus.com/archive/1/350237/30/21640/threaded
CVE ID: CVE-2003-1529 State: PUBLISHED Published: 2007-11-08T20:00:00 Last Updated: 2024-08-08T02:35:16.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Seagull Software Systems J Walk application server 3.2C9, and other versions before 3.3c4, allows remote attackers to read arbitrary files via a ".%252e" (encoded dot dot) in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/8411 - http://archives.neohapsis.com/archives/bugtraq/2003-03/0357.html - http://www.securityfocus.com/bid/7160 - http://www.irmplc.com/advisory/adv5.htm - http://www.securitytracker.com/id?1006378 - http://www.osvdb
us.com/bid/7160 - http://www.irmplc.com/advisory/adv5.htm - http://www.securitytracker.com/id?1006378 - http://www.osvdb.org/4927 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11623
CVE ID: CVE-2003-1530 State: PUBLISHED Published: 2007-11-08T20:00:00 Last Updated: 2024-08-08T02:35:16.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in privmsg.php in phpBB 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the mark[] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6634 - http://www.securityfocus.com/archive/1/307212/30/26300/threaded - http://secunia.com/advisories/7887/ - http://archives.neohapsis.com/archives/bugtraq/2003-01/0125.html - http://www.osvdb.org/4277
CVE ID: CVE-2003-1531 State: PUBLISHED Published: 2007-11-08T20:00:00 Last Updated: 2024-08-08T02:35:17.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in testcgi.exe in Lilikoi Software Ceilidh 2.70 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.security-corporation.com/index.php?id=advisories&a=013-FR - http://marc.info/?l=bugtraq&m=104878375423320&w=2 - http://www.securityfocus.com/bid/7214 - http://secunia.com/advisories/8456 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11638 - http://www.securityt
- http://secunia.com/advisories/8456 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11638 - http://www.securitytracker.com/id?1006391
CVE ID: CVE-2003-1532 State: PUBLISHED Published: 2007-11-08T20:00:00 Last Updated: 2024-08-08T02:35:17.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in compte.php in PhpMyShop 1.00 allows remote attackers to execute arbitrary SQL commands via the (1) identifiant and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3348 - http://www.securityfocus.com/bid/6746 - http://www.securityfocus.com/archive/1/309921/30/26090/threaded - http://secunia.com/advisories/7990 - http://www.securitytracker.com/id?1006030
CVE ID: CVE-2003-1533 State: PUBLISHED Published: 2007-11-08T20:00:00 Last Updated: 2024-08-08T02:35:16.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in accesscontrol.php in PhpPass 2 allows remote attackers to execute arbitrary SQL commands via the (1) uid and (2) pwd parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3349 - http://www.securityfocus.com/archive/1/307224/30/26300/threaded - http://www.securitytracker.com/id?1005948 - http://www.securityfocus.com/bid/6594
CVE ID: CVE-2003-1534 State: PUBLISHED Published: 2007-11-08T20:00:00 Last Updated: 2024-08-08T02:35:16.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in jgb.php3 in Justice Guestbook 1.3 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) aim, (4) yim, (5) location, and (6) comment variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7233 - http://secunia.com/advisories/8475 - http://www.securityfocus.com/archive/1/316745/30/25280/threaded - http://www.securitytracker.com/id?1006412 - http://securityreason.com/securityalert/3347
CVE ID: CVE-2003-1535 State: PUBLISHED Published: 2007-11-08T20:00:00 Last Updated: 2024-08-08T02:35:17.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Justice Guestbook 1.3 allows remote attackers to obtain the full installation path via a direct request to cfooter.php3, which leaks the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/8475 - http://www.securityfocus.com/bid/7234 - http://www.securityfocus.com/archive/1/316745/30/25280/threaded - http://www.securitytracker.com/id?1006412 - http://securityreason.com/securityalert/3347
CVE ID: CVE-2003-1536 State: PUBLISHED Published: 2007-11-08T20:00:00 Last Updated: 2024-08-08T02:35:17.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Codeworx Technologies DCP-Portal 5.3.1 allow remote attackers to inject arbitrary web script or HTML via (1) the q parameter to search.php and (2) the year parameter to calendar.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7141 - http://archives.neohapsis.com/archives/bugtraq/2003-03/0275.html - http://www.osvdb.org/7022 - http://secunia.com/advisories/8358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1160