Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-2029 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Util_DecodeHTTPAuth function in BNBT BitTorrent Tracker Beta 7.5 Release 2 and earlier allows remote attackers to cause a denial of service (crash) via a Basic Authorization HTTP request with a "A==" value. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/6336 - http://marc.info/?l=bugtraq&m=108526361421535&w=2 - http://bnbt.go-dedicated.com/ - http://secunia.com/advisories/11684 - http://fux0r.phathookups.com/advisory/sp-x12-advisory.txt - http://securitytracker.com/id?1010254 - http:/
ories/11684 - http://fux0r.phathookups.com/advisory/sp-x12-advisory.txt - http://securitytracker.com/id?1010254 - http://www.securityfocus.com/bid/10399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16228
CVE ID: CVE-2004-2030 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.jsp for Liferay before 2.2.0 release 10/1/2004 allow remote attackers to inject arbitrary web script or HTML, as demonstrated using the message subject. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110141194202856&w=2 - http://securitytracker.com/id?1010259 - http://secunia.com/advisories/11692 - http://www.osvdb.org/6346 - http://sourceforge.net/project/shownotes.php?release_id=252060 - http://www.securityfocus.com/b
p://www.osvdb.org/6346 - http://sourceforge.net/project/shownotes.php?release_id=252060 - http://www.securityfocus.com/bid/10402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16232 - http://marc.info/?l=bugtraq&m=108526683823840&w=2
CVE ID: CVE-2004-2031 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in user.php in e107 allows remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) MSN, or (3) AIM fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10405 - http://secunia.com/advisories/11696 - http://www.osvdb.org/6410 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16241 - http://marc.info/?l=bugtraq&m=108541119526279&w=2
CVE ID: CVE-2004-2032 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear RP114 allows remote attackers to bypass the keyword based URL filtering by requesting a long URL, as demonstrated using a large number of %20 (hex-encoded space) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11698 - http://marc.info/?l=bugtraq&m=108541203427391&w=2 - http://www.osvdb.org/6411 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16238 - http://www.securityfocus.com/bid/10404
CVE ID: CVE-2004-2033 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Orenosv 0.5.9f allows remote attackers to cause a denial of service (crash) via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/6419 - http://hp.vector.co.jp/authors/VA027031/orenosv/index_en.html - http://secunia.com/advisories/11706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16250 - http://marc.info/?l=bugtraq&m=108559623703422&w=2 - http://www.securityfocus.com/bid/10420
CVE ID: CVE-2004-2034 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the (1) WTHoster and (2) WebDriver modules in WildTangent Web Driver 4.0 allows remote attackers to execute arbitrary code via a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108569235217149&w=2 - http://www.osvdb.org/6445 - http://secunia.com/advisories/11727 - http://www.securityfocus.com/bid/10421 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16266 - http://www.ngssoftware.com/advisories/wildtangent.txt
CVE ID: CVE-2004-2035 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: MiniShare 1.3.2 allows remote attackers to cause a denial of service (crash) via a malformed HTTP GET or HEAD request without the proper number of trailing CRLF sequences. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108563992129877&w=2 - http://www.securityfocus.com/bid/10417 - http://lists.netsys.com/pipermail/full-disclosure/2004-May/021980.html - http://secunia.com/advisories/11715 - http://www.autistici.org/fdonato/advisory/MiniShare1.3.2-adv.txt - https://exchange.xforce.
cunia.com/advisories/11715 - http://www.autistici.org/fdonato/advisory/MiniShare1.3.2-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16260 - http://sourceforge.net/project/shownotes.php?release_id=241158 - http://www.osvdb.org/6432
CVE ID: CVE-2004-2036 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the art_print function in print.inc.php in unknown versions of jPortal before 2.3.1 allows remote attackers to inject arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10430 - http://www.securiteam.com/unixfocus/5HP020KD5K.html - http://marc.info/?l=bugtraq&m=108577011129476&w=2 - http://securitytracker.com/id?1010327 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16272 - http://secunia.com/adviso
/securitytracker.com/id?1010327 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16272 - http://secunia.com/advisories/11737 - http://www.osvdb.org/6503
CVE ID: CVE-2004-2037 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Mollensoft Lightweight FTP Server 3.6 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long CWD command, as demonstrated in one example by using the "cd" command in an interactive FTP client. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10429 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16303 - http://securitytracker.com/id?1010328 - http://marc.info/?l=bugtraq&m=108611230015042&w=2
d.com/vulnerabilities/16303 - http://securitytracker.com/id?1010328 - http://marc.info/?l=bugtraq&m=108611230015042&w=2 - http://marc.info/?l=bugtraq&m=108577846011604&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16237 - http://www.osvdb.org/6412 - http://www.securityfocus.com/bid/10409
CVE ID: CVE-2004-2038 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) before LDU 700 allows remote attackers to inject arbitrary web script or HTML via a BBcode img tag in (1) functions.php, (2) header.php or (3) auth.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/6511 - http://ldu.neocrome.net/page.php?id=1357 - http://www.osvdb.org/6508 - http://www.osvdb.org/6510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16284 - http://marc.info/?l=bugtraq&m=108585789220174&w=2 - http
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16284 - http://marc.info/?l=bugtraq&m=108585789220174&w=2 - http://www.securityfocus.com/bid/10435 - http://secunia.com/advisories/11739 - http://securitytracker.com/alerts/2004/May/1010335.html
CVE ID: CVE-2004-2039 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: e107 0.615 allows remote attackers to obtain sensitive information via a direct request to (1) alt_news.php, (2) backend_menu.php, (3) clock_menu.php, (4) counter_menu.php, (5) login_menu.php, and other files, which reveal the full path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16277 - http://www.waraxe.us/index.php?modname=sa&id=31 - http://www.securityfocus.com/bid/10436 - http://www.osvdb.org/6525 - http://secunia.com/advisor
x.php?modname=sa&id=31 - http://www.securityfocus.com/bid/10436 - http://www.osvdb.org/6525 - http://secunia.com/advisories/11740 - http://marc.info/?l=bugtraq&m=108588043007224&w=2 - http://marc.info/?l=full-disclosure&m=108586723116427&w=2
CVE ID: CVE-2004-2040 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary web script or HTML via the (1) LAN_407 parameter to clock_menu.php, (2) "email article to a friend" field, (3) "submit news" field, or (4) avmsg parameter to usersettings.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/6529 - http://www.waraxe.us/index.php?modname=sa&id=31 - http://www.securityfocus.com/bid/10436 - http://www.osvdb.org/6527 - http://www.osvdb.org/6528 - https:/
name=sa&id=31 - http://www.securityfocus.com/bid/10436 - http://www.osvdb.org/6527 - http://www.osvdb.org/6528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16279 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16280 - http://secunia.com/advisories/11740 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16281 - http://www.osvdb.org/6526 - http://marc.info/?l=bugtraq&m=108588043007224&w=2 - http://marc.info/?l=full-disclosure&m=108586723116427&w=2
CVE ID: CVE-2004-2041 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in secure_img_render.php in e107 0.615 allows remote attackers to execute arbitrary PHP code by modifying the p parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/index.php?modname=sa&id=31 - http://www.securityfocus.com/bid/10436 - http://secunia.com/advisories/11740 - http://www.osvdb.org/6530 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16282 - http://marc.info/?l=b
s/11740 - http://www.osvdb.org/6530 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16282 - http://marc.info/?l=bugtraq&m=108588043007224&w=2 - http://marc.info/?l=full-disclosure&m=108586723116427&w=2
CVE ID: CVE-2004-2042 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary SQL code and gain sensitive information via (1) content parameter to content.php, (2) content_id parameter to content.php, or (3) list parameter to news.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/6532 - http://www.osvdb.org/6531 - http://www.waraxe.us/index.php?modname=sa&id=31 - http://www.securityfocus.com/bid/10436 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16283 - http:
e=sa&id=31 - http://www.securityfocus.com/bid/10436 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16283 - http://secunia.com/advisories/11740 - http://marc.info/?l=bugtraq&m=108588043007224&w=2 - http://marc.info/?l=full-disclosure&m=108586723116427&w=2 - http://www.osvdb.org/6533
CVE ID: CVE-2004-2043 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service (crash) via a long database name, as demonstrated using the gsec command. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1014 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16229 - http://secunia.com/advisories/19350 - http://marc.info/?l=bugtraq&m=108611386202493&w=
cloud.com/vulnerabilities/16229 - http://secunia.com/advisories/19350 - http://marc.info/?l=bugtraq&m=108611386202493&w=2 - http://www.osvdb.org/6624 - http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0027.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16316 - http://www.securityfocus.com/bid/10446 - http://www.securiteam.com/unixfocus/5AP0P0UCUO.html - http://securitytracker.com/id?1010381 - http://www.osvdb.org/6408 - http://secunia.com/advisories/11756
CVE ID: CVE-2004-2044 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke 7x do not properly use the eregi() PHP function with $_SERVER['PHP_SELF'] to identify the calling script, which allows remote attackers to directly access scripts, obtain path information via a PHP error message, and possibly gain access, as demonstrated using an HTTP request that contains the "admin.php" string. Additional Analyst Notes: - CVE Program Container: References: - http://archi
uest that contains the "admin.php" string. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2004-06/0005.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16298 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16294 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16297 - http://www.osvdb.org/6593 - http://marc.info/?l=bugtraq&m=108662955105757&w=2 - http://www.securityfocus.com/bid/10447 - http://marc.info/?l=bugtraq&m=108611606320559&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16296 - http://secunia.com/advisories/11766 - htt
11606320559&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16296 - http://secunia.com/advisories/11766 - http://marc.info/?l=bugtraq&m=108611643614881&w=2
CVE ID: CVE-2004-2045 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to cause a denial of service (device reboot) via an HTTP request with a long username. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12110 - http://www.shellsec.net/leer_advisory.php?id=5 - http://www.securityfocus.com/bid/10769 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16746 - http://marc.info/?l=bugtraq&m=109045084522857&w=2
CVE ID: CVE-2004-2046 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in APC PowerChute Business Edition 6.0 through 7.0.1 allows remote attackers to cause a denial of service via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1010745 - http://www.osvdb.org/8187 - http://secunia.com/advisories/12124 - http://www.securityfocus.com/bid/10777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16767 - http://marc.info/?l=bugtraq&m=109061480026378&w=2
CVE ID: CVE-2004-2047 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in EasyWeb FileManager 1.0 RC-1 for PostNuke allows remote attackers to retrieve arbitrary files via a .. (dot dot) in the pathext parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109068482605241&w=2 - http://www.osvdb.org/8193 - http://www.cirt.net/advisories/ew_file_manager.shtml - http://www.securityfocus.com/bid/10792 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16806 - http://secunia.com/advisories/12151
CVE ID: CVE-2004-2048 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be accessed with a default "jstwo" password, which allows remote attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16790 - http://www.securityfocus.com/bid/10794 - http://secunia.com/advisories/12154 - http://securitytracker.com/id?1010770 - http://marc.info/?l=bugtraq&m=109068491801021&w=2 - http://www.osvdb.org/8246
CVE ID: CVE-2004-2049 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext in configuration files for the keeper library, which allows attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/8247 - http://www.securityfocus.com/bid/10794 - http://secunia.com/advisories/12154 - http://securitytracker.com/id?1010770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16795 - http://marc.info/?l=bugtraq&m=109068491801021&w=2
CVE ID: CVE-2004-2050 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allow local users to gain privileges by pressing CTRL-SHIFT-ALT-DEL and entering the "maertsJ" password, which is hard-coded into lshell. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/8248 - http://www.securityfocus.com/bid/10794 - http://secunia.com/advisories/12154 - http://securitytracker.com/id?1010770 - http://marc.info/?l=bugtraq&m=109068491801021&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16808
CVE ID: CVE-2004-2051 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Phoenix browser in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allows local users to read arbitrary files via a file:/// URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16798 - http://www.securityfocus.com/bid/10794 - http://secunia.com/advisories/12154 - http://www.osvdb.org/8249 - http://securitytracker.com/id?1010770 - http://marc.info/?l=bugtraq&m=109068491801021&w=2
CVE ID: CVE-2004-2052 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: eSeSIX Thintune thin clients running firmware 2.4.38 and earlier accept any password that begins with the actual password, which makes it easier for users to conduct brute force password guessing. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109068491801021&w=2
CVE ID: CVE-2004-2053 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in EasyIns Stadtportal 4 allows remote attackers to execute arbitrary PHP code via the site parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16797 - http://marc.info/?l=bugtraq&m=109069241512694&w=2 - http://www.securityfocus.com/bid/10795 - http://www.osvdb.org/8233 - http://securitytracker.com/id?1010769
CVE ID: CVE-2004-2054 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in PhpBB 2.0.4 and 2.0.9 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via (1) the mode parameter to privmsg.php or (2) the redirect parameter to login.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109034476122723&w=2 - http://www.securityfocus.com/bid/10753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16759 - http://secunia.com/advisories/12114
CVE ID: CVE-2004-2055 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote attackers to inject arbitrary HTMl or web script via the search_author parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109034476122723&w=2 - http://www.securityfocus.com/bid/10753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16758 - http://secunia.com/advisories/12114
CVE ID: CVE-2004-2056 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in action.php in Nucleus CMS 3.01 allows remote attackers to execute arbitrary SQL statements via the itemid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109087144509299&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18002 - http://secunia.com/advisories/13136
CVE ID: CVE-2004-2057 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements. Additional Analyst Notes: - CVE Program Container: References: - http://ferruh.mavituna.com/article/?574 - http://secunia.com/advisories/12164 - http://www.osvdb.org/8251 - http://marc.info/?l=bugtraq&m=109086977330418&w=2 - http://securitytracker.com/id?1010777 - http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0011.html - http://www.securityfocus.com/bid/10799 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
lnwatch/2004-q3/0011.html - http://www.securityfocus.com/bid/10799 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16799
CVE ID: CVE-2004-2058 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASPRunner 2.4 allows remote attackers to gain sensitive information via (1) hidden form fields or (2) error messages. Additional Analyst Notes: - CVE Program Container: References: - http://ferruh.mavituna.com/article/?574 - http://secunia.com/advisories/12164 - http://www.osvdb.org/8252 - http://marc.info/?l=bugtraq&m=109086977330418&w=2 - http://securitytracker.com/id?1010777 - http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0011.html - http://www.securityfocus.com/bid/10799 - https://exchange.xforce.ibmcloud.com/vu
/archives/vulnwatch/2004-q3/0011.html - http://www.securityfocus.com/bid/10799 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16800