Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-2123 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Nextplace.com E-Commerce ASP Engine allow remote attackers to inject arbitrary web script or HTML via the (1) level parameter of productdetail.asp, (2) searchKey parameter of searchresults.asp, and possibly (3) level parameter of ListCategories.asp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107513601805018&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14952
CVE ID: CVE-2004-2124 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POST_VARS variable and conduct a PHP remote file inclusion attack via the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9490 - http://secunia.com/advisories/10712/ - http://gallery.menalto.com/modules.php?op=modload&name=News&file=index - https://exchange.xforce.ibmcloud.com/vulnerabilitie
://gallery.menalto.com/modules.php?op=modload&name=News&file=index - https://exchange.xforce.ibmcloud.com/vulnerabilities/14950 - http://www.gentoo.org/security/en/glsa/glsa-200402-04.xml - http://marc.info/?l=bugtraq&m=107524414317693&w=2 - http://www.osvdb.org/3737
CVE ID: CVE-2004-2125 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14965 - http://www.securityfocus.com/bid/9514 - http://www.osvdb.org/3740 - http://marc.info/?l=bugtraq&m=107530966524193&w=2 - http://archives.neohapsis.com/archives/
http://www.osvdb.org/3740 - http://marc.info/?l=bugtraq&m=107530966524193&w=2 - http://archives.neohapsis.com/archives/iss/2004-q1/0157.html - http://secunia.com/advisories/10739
CVE ID: CVE-2004-2126 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: The upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI files such as (1) blackice.ini, (2) firewall.ini, (3) protect.ini, or (4) sigs.ini, which allows local users to modify BlackICE configuration or possibly execute arbitrary code by exploiting vulnerabilities in the .INI parsers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9513 - http://marc.info/?l=bugtraq&m=107530966524193&w=2
CVE ID: CVE-2004-2127 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file variable. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107531194527602&w=2 - http://secunia.com/advisories/10740 - http://www.securityfocus.com/bid/9517 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14978 - http://www.zone-h.org/en/advisories/read/id=3822/ - http://www.osvdb.org/3739
CVE ID: CVE-2004-2128 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in BRS WebWeaver 1.07 allows remote attackers to execute arbitrary script as other users via the query string to ISAPISkeleton.dll. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3741 - http://secunia.com/advisories/10741 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14977 - http://marc.info/?l=bugtraq&m=107531020924977&w=2 - http://www.brswebweaver.com/modules.php?op=modload&name=News&file=article&sid=1 - http://www.securitytracker.com/id
=2 - http://www.brswebweaver.com/modules.php?op=modload&name=News&file=article&sid=1 - http://www.securitytracker.com/id?1008880 - http://www.securityfocus.com/bid/9516
CVE ID: CVE-2004-2129 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: SurfNOW 2.2 allows remote attackers to cause a denial of service (crash) via a series of long HTTP GET requests, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9519 - http://marc.info/?l=bugtraq&m=107530924723559&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14976
CVE ID: CVE-2004-2130 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote attackers to execute arbitrary script or HTML via the (1) folder or (2) mode variables. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107530946123822&w=2 - http://www.securityfocus.com/bid/9290 - http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=161943
CVE ID: CVE-2004-2131 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3759 - http://www.securityfocus.com/bid/9512 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14970 - http://secunia.com/advisories/10737/ - http://marc.info/?l=bugtraq&m=107539878804074&w=2 - http://www-1.ibm.com/support/docview.wss?
ia.com/advisories/10737/ - http://marc.info/?l=bugtraq&m=107539878804074&w=2 - http://www-1.ibm.com/support/docview.wss?uid=swg21153336
CVE ID: CVE-2004-2132 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in PJreview_Neo.cgi in PJ CGI Neo review allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.secunia.com/advisories/10734/ - http://www.securityfocus.com/bid/9524 - http://marc.info/?l=bugtraq&m=107539804702913&w=2 - http://www.osvdb.org/3746 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14980 - http://www.zone-h.org/advisories/read/id=3824
CVE ID: CVE-2004-2133 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the ELF RPATH fields of certain executables, which could allow local users to execute arbitrary code by causing cvsup to link against malicious libraries that are created in world-writable directories such as /usr/src/packages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14994 - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0025.html - http://www.secur
mcloud.com/vulnerabilities/14994 - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0025.html - http://www.securityfocus.com/bid/9523 - http://marc.info/?l=bugtraq&m=107539776002450&w=2
CVE ID: CVE-2004-2134 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt the passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9515 - http://www.securityfocus.com/archive/1/352315/30/21430/threaded - http://www.planet-source-code.com/vb/scripts/ShowCode.asp?txtCodeId=803&lngWId=5 - http://marc.info/?l=bugtraq&m=107531028325112&w=2 - http://www.securityfocus.com/archive/82/351719
CVE ID: CVE-2004-2135 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-08T01:15:01.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption. Additional Analyst Notes: - CVE Program Container: References: - http://mareichelt.de/pub/notmine/diskenc.pdf - http://www.securityfocus.com/bid/13775 - http://www.securiteam.com/exploits/5UP0P1PFPM.html - http://marc.info/?l=linux-kernel&m=107719798631935&w=2
CVE ID: CVE-2004-2136 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-08T01:15:01.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: dm-crypt on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption. Additional Analyst Notes: - CVE Program Container: References: - http://mareichelt.de/pub/notmine/diskenc.pdf - http://www.securiteam.com/exploits/5UP0P1PFPM.html - http://marc.info/?l=linux-kernel&m=107719798631935&w=2
CVE ID: CVE-2004-2137 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-08T01:15:01.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients of the message to the addresses listed in the To and CC fields, which may allow remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11040 - http://www.networksecurity.fi/advisories/outlook-bcc.html - http://securitytracker.com/id?1011067 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1709
ies/outlook-bcc.html - http://securitytracker.com/id?1011067 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17098 - http://support.microsoft.com/kb/843555 - http://secunia.com/advisories/12376 - http://www.osvdb.org/9167
CVE ID: CVE-2004-2138 State: PUBLISHED Published: 2005-06-30T04:00:00 Last Updated: 2024-08-08T01:15:01.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in AWSguest.php in AllWebScripts MySQLGuest allows remote attackers to inject arbitrary HTML and PHP code via the (1) Name, (2) Email, (3) Homepage or (4) Comments field. Additional Analyst Notes: - CVE Program Container: References: - http://www.computerknights.org/forum_viewtopic.php?2.122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17462 - http://securitytracker.com/id?1011376 - http://www.securityfocus.com/bid/11234
CVE ID: CVE-2004-2139 State: PUBLISHED Published: 2005-06-30T04:00:00 Last Updated: 2024-08-08T01:15:01.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Adminedit.pl YaBB 1 Gold before 1.3.2 allows attackers to execute arbitrary code via settings.pl. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11235 - http://www.yabbforum.com/community/YaBB.pl?board=general%3Baction=display%3Bnum=1093133233 - http://secunia.com/advisories/12609/ - http://www.osvdb.org/10222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17459
CVE ID: CVE-2004-2140 State: PUBLISHED Published: 2005-06-30T04:00:00 Last Updated: 2024-08-08T01:15:01.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in YaBB 1 Gold before 1.3.2 allows remote attackers to modify text file contents via the subject variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.yabbforum.com/community/YaBB.pl?board=general%3Baction=display%3Bnum=1093133233 - http://secunia.com/advisories/12609/
CVE ID: CVE-2004-2141 State: REJECTED Published: 2005-06-30T04:00:00 Last Updated: 2005-08-19T09:00:00 Description: No description available.
CVE ID: CVE-2004-2142 State: PUBLISHED Published: 2005-06-30T04:00:00 Last Updated: 2024-08-08T01:15:01.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the remote tape support (remote.c) in the RMT client for Jorg Schilling sdd 1.28 and 1.31 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.berlios.de/pub/sdd/AN-1.52 - http://secunia.com/advisories/12584/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/17442
CVE ID: CVE-2004-2143 State: PUBLISHED Published: 2005-06-30T04:00:00 Last Updated: 2024-08-08T01:15:01.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09) and earlier allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in the com_remository option. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/10040 - http://www.securityfocus.com/bid/11219 - http://secunia.com/advisories/12597/ - http://www.mamboportal.com/content/view/1615/ - http://securitytracker.com/id?1011356 - https://exchange.xforce.ibmcloud.com/vulnerabi
boportal.com/content/view/1615/ - http://securitytracker.com/id?1011356 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17441 - http://archives.neohapsis.com/archives/bugtraq/2004-09/0215.html - http://archives.neohapsis.com/archives/bugtraq/2004-09/0249.html
CVE ID: CVE-2004-2144 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-08T01:15:01.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baal Smart Forms before 3.2 allows remote attackers to bypass authentication and obtain system access via a direct request to regadmin.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17499 - http://secunia.com/advisories/12649/ - http://securitytracker.com/id?1011416
CVE ID: CVE-2004-2145 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-08T01:15:01.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows remote attackers to execute arbitrary SQL commands via the (1) sortdir or (2) criteria parameter to ladder-log.asp or the (3) memberid or (4) teamid parameter to view-profile.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17497 - http://marc.info/?l=bugtraq&m=109631200701134&w=2 - http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0962.html
CVE ID: CVE-2004-2146 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-08T01:15:01.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows attackers to conduct HTTP response splitting attacks via the fid parameter in a writenew action to thread-post.asp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109631200701134&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17495 - http://www.pd9soft.com/megabbs/forums/thread-view.asp?tid=4924 - http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0962.html
CVE ID: CVE-2004-2147 State: PUBLISHED Published: 2005-07-01T04:00:00Z Last Updated: 2024-09-17T00:31:19.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown versions of Symantec Norton AntiVirus and Microsoft Outlook allow attackers to cause a denial of service (crash) via malformed e-mail messages (1) without a body or (2) without a carriage return ("\n") separating the headers from the body. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/82/376487/2004-09-24/2004-09-30/0 - http://www.securityfocus.com/bid/11259
CVE ID: CVE-2004-2148 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-08T01:15:01.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown local vulnerability in the "change user" feature of Slava Astashonok Fprobe 1.0.5 and earlier has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1011417 - http://sourceforge.net/project/shownotes.php?release_id=269807 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17494 - http://www.securityfocus.com/bid/11255 - http://secunia.com/advisories/12648/
CVE ID: CVE-2004-2149 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-08T01:15:01.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the prepared statements API in libmysqlclient for MySQL 4.1.3 beta and 4.1.4 allows remote attackers to cause a denial of service via a large number of placeholders. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.mysql.com/bug.php?id=5194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17493 - http://securitytracker.com/id?1011408 - http://www.osvdb.org/10244 - http://dev.mysql.com/doc/mysql/en/news-4-1-5.html - http://www.securityfocus.com/bid/11261
CVE ID: CVE-2004-2150 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-08T01:15:01.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nettica Corporation INTELLIPEER Email Server 1.01 displays different error messages for valid and invalid account names, which allows remote attackers to determine valid account names. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1011425 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17510 - http://www.osvdb.org/10349 - http://www.securityfocus.com/bid/11257 - http://secunia.com/advisories/12661/
CVE ID: CVE-2004-2151 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-08T01:15:01.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chatman 1.1.1 RC1 and earlier allows remote attackers to cause a denial of service (memory consumption or application crash) via a very large data size. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1011431 - http://www.securityfocus.com/bid/11263 - http://www.osvdb.org/10365 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17513 - http://www.securityfocus.com/archive/1/376569 - http://secunia.com/advisories/12665/
CVE ID: CVE-2004-2152 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-08T01:15:01.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=34373&release_id=271848 - http://secunia.com/advisories/12692/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/17578 - http://www.osvdb.org/10454 - http://www.securityfocus.com/bid/11302
CVE ID: CVE-2004-2153 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-08T01:15:01.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unknown vulnerabilities in Real Estate Management Software 1.0 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17598 - http://archives.neohapsis.com/archives/apps/freshmeat/2004-09/0030.html - http://www.osvdb.org/10480 - http://www.securityfocus.com/bid/11304
CVE ID: CVE-2004-2154 State: PUBLISHED Published: 2005-07-05T04:00:00 Last Updated: 2024-08-08T01:15:01.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://www.cups.org/str.php?L700 - http://www.redhat.com/support/errata/RHSA-2005-571.html - https://bugzilla.redhat.com/bugz
//www.cups.org/str.php?L700 - http://www.redhat.com/support/errata/RHSA-2005-571.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=163274 - http://www.ubuntu.com/usn/usn-185-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9940 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162405
CVE ID: CVE-2004-2155 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online-bookmarks before 0.4.6 allows remote attackers to bypass its authentication mechanism via a direct request to (1) config/*, (2) bookmarks.php, (3) footer.php, (4) main.php, (5) tree.php, or (6) functions.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17602 - http://secunia.com/advisories/12728/ - http://www.securityfocus.com/bid/11305 - http://freshmeat.net/projects/onlinebookmarks/?branch_id=34962&release_id=174401
CVE ID: CVE-2004-2156 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unknown vulnerabilities in Online Recruitment Agency 1.0 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11306 - http://secunia.com/advisories/12720/ - http://www.osvdb.org/10479 - http://archives.neohapsis.com/archives/apps/freshmeat/2004-09/0030.html - http://securitytracker.com/id?1011539 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17586
CVE ID: CVE-2004-2157 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Comment.php in Serendipity 0.7 beta1, and possibly other versions before 0.7-beta3, allows remote attackers to inject arbitrary HTML and PHP code via the (1) email or (2) username field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17536 - http://securitytracker.com/id?1011448 - http://secunia.com/advisories/12673/ - http://lists.grok.org.uk/pipermail/full-disclosure/2004
ytracker.com/id?1011448 - http://secunia.com/advisories/12673/ - http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026955.html
CVE ID: CVE-2004-2158 State: PUBLISHED Published: 2005-07-10T04:00:00 Last Updated: 2024-08-08T01:15:01.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Serendipity 0.7-beta1 allows remote attackers to execute arbitrary SQL commands via the entry_id parameter to (1) exit.php or (2) comment.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11269 - http://securitytracker.com/id?1011448 - http://secunia.com/advisories/12673/ - http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026955.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17533 - http://www.osvdb.org/10371 - htt