Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-4226 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple "potential" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute arbitrary SQL commands via (1) the ref parameter in download.php, (2) the direction, msg, sforum, reason, subname, and toform parameters in forum.php, (3) the msg and forum parameters in forum_edit.php, (4) the msg and forum parameters in forum_write.php, (5) the tekst parameter in guestbook.php, (6) the menuoption parameter in index.php, and the (7) sel_avatar parameter in myaccount.php. NOTE: the forum.php/f
php, (6) the menuoption parameter in index.php, and the (7) sel_avatar parameter in myaccount.php. NOTE: the forum.php/forum vector is already identified by CVE-2005-3585. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/419280/100/0/threaded - http://www.osvdb.org/21653 - http://www.osvdb.org/21650 - http://www.vupen.com/english/advisories/2005/2860 - http://secunia.com/advisories/18011/ - http://www.osvdb.org/21654 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23565 - http://glide.stanford.edu/yichen/research/sec.pdf - http://www.osvdb.org/21651 - http://www.securityfocus.com/archive/1/419487/100/0/threaded - http://www.osvdb.
/sec.pdf - http://www.osvdb.org/21651 - http://www.securityfocus.com/archive/1/419487/100/0/threaded - http://www.osvdb.org/21656 - http://www.osvdb.org/21655 - http://www.osvdb.org/21652
CVE ID: CVE-2005-4227 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple "potential" SQL injection vulnerabilities in DCP-Portal 6.1.1 might allow remote attackers to execute arbitrary SQL commands via (1) the password and username parameters in advertiser.php, (2) the aid parameter in announcement.php, (3) the dcp5_member_id, year, agid, day, day_s, hour, minute, month, month_s, and year_s parameters in calendar.php, (4) the cid parameter in contents.php, (5) the dcp5_member_id parameter in forums.php, (6) the bid parameter in go.php, (7) the lid parameter in golink.php, (8) the dcp5_memb
mber_id parameter in forums.php, (6) the bid parameter in go.php, (7) the lid parameter in golink.php, (8) the dcp5_member_id and mid parameters in inbox.php, (9) the catid, dcat, and dl parameters in index.php, (10) the dcp5_member_id in informer.php, (11) the nid parameter in news.php, (12) the type and rate parameters in rate.php, (13) the q parameter in search.php, and (14) the dcp5_member_id in update.php. NOTE: other vectors in the PHP-CHECKER report are also covered by CVE-2005-3365 and CVE-2005-0454. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22021 - http://www.securityfocus.com/archive/1/419280/100/0/threaded - http://www.osvdb.org/22028 -
ttp://www.osvdb.org/22021 - http://www.securityfocus.com/archive/1/419280/100/0/threaded - http://www.osvdb.org/22028 - http://www.osvdb.org/22027 - http://www.osvdb.org/22017 - http://www.osvdb.org/22025 - http://www.osvdb.org/22026 - http://secunia.com/advisories/12751 - http://www.osvdb.org/22020 - http://www.osvdb.org/22031 - http://www.osvdb.org/22030 - http://www.osvdb.org/22023 - http://www.osvdb.org/22024 - http://www.securityfocus.com/bid/15183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22855 - http://glide.stanford.edu/yichen/research/sec.pdf - http://www.vupen.com/english/advisories/2005/2863 - http://www.osvdb.org/22019 - http://www.securityfocus.com/archive/1/419487/
www.vupen.com/english/advisories/2005/2863 - http://www.osvdb.org/22019 - http://www.securityfocus.com/archive/1/419487/100/0/threaded - http://www.osvdb.org/22022 - http://www.osvdb.org/22029 - http://www.osvdb.org/22018
CVE ID: CVE-2005-4228 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PhpWebGallery 1.5.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) since, (2) sort_by, and (3) items_number parameters to comments.php, (4) the search parameter to category.php, and (5) image_id parameter to picture.php. NOTE: it was later reported that the comments.php/sort_by vector also affects 1.7.2 and earlier. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/phpwebgallery-multiple-sql-inj.html
Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/phpwebgallery-multiple-sql-inj.html - http://www.osvdb.org/21690 - http://secunia.com/advisories/18019 - http://www.vupen.com/english/advisories/2005/2881 - http://www.securityfocus.com/bid/15837 - http://www.osvdb.org/21691 - http://www.osvdb.org/21689
CVE ID: CVE-2005-4229 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in auction.pl in EveryAuction 1.53 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources and independently verified using source code inspection. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23568 - http://www.osvdb.org/21674 - http://secunia.com/advisories/18
tps://exchange.xforce.ibmcloud.com/vulnerabilities/23568 - http://www.osvdb.org/21674 - http://secunia.com/advisories/18016 - http://www.vupen.com/english/advisories/2005/2857 - http://www.securityfocus.com/bid/15824
CVE ID: CVE-2005-4230 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in poll.php in Link Up Gold 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the number parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21701 - http://www.securityfocus.com/bid/15843 - http://pridels0.blogspot.com/2005/12/link-up-gold-vuln.html
CVE ID: CVE-2005-4231 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Link Up Gold 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) link parameter to tell_friend.php, (2) phrase[] parameter to search.php in a search_links_advanced action, and the (3) direction or (4) sort parameter to articles.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15843 - http://secunia.com/advisories/18031 - http://www.vupen.com/english/advisories/2005/2884 - http://pridels0.blogspot
843 - http://secunia.com/advisories/18031 - http://www.vupen.com/english/advisories/2005/2884 - http://pridels0.blogspot.com/2005/12/link-up-gold-vuln.html
CVE ID: CVE-2005-4232 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the vendor has disputed this issue, saying "The vulnerability is without any basis and did not actually work." CVE has not verified either the vendor or researcher statements, but the original researcher is known to make frequent mistakes when reporting SQL injection Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21687 - http:
orting SQL injection Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21687 - http://www.securityfocus.com/bid/15848 - http://secunia.com/advisories/18007 - http://www.vupen.com/english/advisories/2005/2879 - http://www.attrition.org/pipermail/vim/2006-August/000972.html - http://pridels0.blogspot.com/2005/12/jamit-job-board-24x-sql-inj.html
CVE ID: CVE-2005-4233 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in advertiser_statistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ad_number parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/ad-manager-pro-sql-vuln.html - http://www.osvdb.org/21709 - http://www.securityfocus.com/bid/15847
CVE ID: CVE-2005-4234 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in gallery.php in EncapsGallery 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/encapsgallery-sql-inj-vuln.html - http://www.vupen.com/english/advisories/2005/2878 - http://www.osvdb.org/21696 - http://secunia.com/advisories/18021 - http://www.securityfocus.com/bid/15836
CVE ID: CVE-2005-4235 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in knowledgebase.php in WHMCompleteSolution 2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21697 - http://www.securityfocus.com/bid/15856 - http://www.vupen.com/english/advisories/2005/2883 - http://pridels0.blogspot.com/2005/12/whmcompletesolution-xss-vuln.html - http://secunia.com/advisories/18029
CVE ID: CVE-2005-4236 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in CKGOLD allows remote attackers to inject arbitrary web script or HTML via the search parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17972 - http://pridels0.blogspot.com/2005/12/ckgold-xss-vuln.html - http://www.osvdb.org/21675 - http://www.vupen.com/english/advisories/2005/2873 - http://www.securityfocus.com/bid/15854
CVE ID: CVE-2005-4237 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MySQL Auction 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keyword parameter in the SearchZoom module. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21685 - http://www.vupen.com/english/advisories/2005/2876 - http://secunia.com/advisories/18006 - http://pridels0.blogspot.com/2005/12/mysql-auction-xss-vuln.html - http://www.securityfocus.com/bid/15852
CVE ID: CVE-2005-4238 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers to inject arbitrary web script or HTML via the target_field parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18481 - http://www.securityfocus.com/bid/15842 - http://www.vupen.com/english/advisories/2005/2874 - http://pridels0.blogspot.com/2005/12/mantis-bugtracking-system-xss-vuln.html - http://www.debian.org/security/2005/dsa-944 - http://secunia.com/
.com/2005/12/mantis-bugtracking-system-xss-vuln.html - http://www.debian.org/security/2005/dsa-944 - http://secunia.com/advisories/18018
CVE ID: CVE-2005-4239 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Search/DisplayResults.php in PHP JackKnife 2.21 and earlier allows remote attackers to inject arbitrary web script or HTML via URL-encoded values in the sKeywords parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2877 - http://pridels0.blogspot.com/2005/12/php-jackknife-xss-vuln.html - http://secunia.com/advisories/18020 - http://www.securityfocus.com/bid/15841
CVE ID: CVE-2005-4240 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL commands via the by parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21699 - http://www.securityfocus.com/bid/15840 - http://pridels0.blogspot.com/2005/12/vcd-db-vuln.html
CVE ID: CVE-2005-4241 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the category page in VCD-db 0.98 and earlier allows remote attackers to inject arbitrary web script or HTML via the batch parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15840 - http://secunia.com/advisories/18034 - http://pridels0.blogspot.com/2005/12/vcd-db-vuln.html - http://www.osvdb.org/21700 - http://www.vupen.com/english/advisories/2005/2885
CVE ID: CVE-2005-4242 State: PUBLISHED Published: 2005-12-14T19:00:00 Last Updated: 2024-08-07T23:38:51.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the address book and (2) contact data. Additional Analyst Notes: - CVE Program Container: References: - http://lists.horde.org/archives/announce/2005/000235.html - http://secunia.com/advisories/17968 - http://www.vupen.com/english/advisories/2005/2837
CVE ID: CVE-2005-4243 State: PUBLISHED Published: 2005-12-15T11:00:00 Last Updated: 2024-08-07T23:38:51.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) popupid parameter in popups.edit.php; (2) so, (3) sb, and (4) nr parameters in customer.tickets.view.php; (5) subrackingid parameter in subscribers.tracking.edit.php; (6) delete parameter in design.php; (7) trackingid parameter in tracking.details.php; and (8) customerid parameter in sales.view.php. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/qu
sales.view.php. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/quickpaypro-31-multiple-vuln.html - http://www.vupen.com/english/advisories/2005/2875 - http://www.osvdb.org/21676 - http://www.osvdb.org/21681 - http://secunia.com/advisories/17981 - http://www.osvdb.org/21679 - http://www.securityfocus.com/bid/15863 - http://www.osvdb.org/21677 - http://www.osvdb.org/21680 - http://www.osvdb.org/21678
CVE ID: CVE-2005-4244 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) gallery_id parameter to view.php and (2) image_id parameter to image.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18022 - http://www.vupen.com/english/advisories/2005/2882 - http://www.osvdb.org/21694 - http://pridels0.blogspot.com/2005/12/snipe-gallery-sqlxss-vuln.html - http://www.securityfocus.com/bid/15844 - http://www.osvdb.org/21693
CVE ID: CVE-2005-4245 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18022 - http://www.vupen.com/english/advisories/2005/2882 - http://pridels0.blogspot.com/2005/12/snipe-gallery-sqlxss-vuln.html - http://www.securityfocus.com/bid/15844 - http://www.osvdb.org/21695 - http://securityreason.com/securityalert/716
CVE ID: CVE-2005-4246 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Plogger Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to index.php and (2) page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15839 - http://pridels0.blogspot.com/2005/12/plogger-sqlxss-vuln.html - http://www.osvdb.org/21710 - http://masendav.com/~duke/PloggerChanges_files/FileComparisonReport5.html
CVE ID: CVE-2005-4247 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Plogger Beta 2 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15839 - http://pridels0.blogspot.com/2005/12/plogger-sqlxss-vuln.html - http://www.osvdb.org/21711
CVE ID: CVE-2005-4248 State: PUBLISHED Published: 2005-12-15T11:00:00 Last Updated: 2024-08-07T23:38:51.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in QuickPayPro 3.1 allow remote attackers to inject arbitrary web script or HTML via various fields, such as those in (1) communication/subscribers.tracking.add.php, (2) support/tickets.add.php, and (3) mycompany/categories.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21682 - http://pridels0.blogspot.com/2005/12/quickpaypro-31-multiple-vuln.html - http://www.vupen.com/english/advisories/2005/2875 - http://www.osvdb.org/21683 - htt
quickpaypro-31-multiple-vuln.html - http://www.vupen.com/english/advisories/2005/2875 - http://www.osvdb.org/21683 - http://secunia.com/advisories/17981 - http://www.securityfocus.com/bid/15863 - http://www.osvdb.org/21684
CVE ID: CVE-2005-4249 State: PUBLISHED Published: 2005-12-15T11:00:00 Last Updated: 2024-08-07T23:38:51.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: ADP Forum 2.0 through 2.0.3 stores sensitive information in plaintext files under the web document root with insufficient access control, which allows remote attackers to obtain user credentials via requests to the forum/users directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18027 - http://www.securityfocus.com/archive/1/419393/100/0/threaded - http://securityreason.com/securityalert/253 - http://www.blogcu.com/Liz0ziM/144336/
CVE ID: CVE-2005-4250 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to read arbitrary files via the language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/mcgallery-pro-vuln.html - http://secunia.com/advisories/18039 - http://www.osvdb.org/21718 - http://www.vupen.com/english/advisories/2005/2886
CVE ID: CVE-2005-4251 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) start, and (3) rand parameters to show.php, and the (4) album parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/mcgallery-pro-vuln.html - http://www.osvdb.org/21719 - http://secunia.com/advisories/18039 - http://www.securityfocus.com/bid/15845 - http://www.osvdb.org/21720 - http://www.vupen.com/english/adv
dvisories/18039 - http://www.securityfocus.com/bid/15845 - http://www.osvdb.org/21720 - http://www.vupen.com/english/advisories/2005/2886
CVE ID: CVE-2005-4252 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T23:38:51.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/mcgallery-pro-vuln.html - http://secunia.com/advisories/18039 - http://www.securityfocus.com/bid/15845 - http://www.vupen.com/english/advisories/2005/2886 - http://www.osvdb.org/21721
CVE ID: CVE-2005-4253 State: PUBLISHED Published: 2005-12-15T11:00:00 Last Updated: 2024-08-07T23:38:51.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in getdox.php in Torrential 1.2 allows remote attackers to inject arbitrary web script or HTML via the URL. NOTE: this might be resultant from CVE-2005-4160. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15543 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23232 - http://www.osvdb.org/21304 - http://securitytracker.com/id?1015338 - http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0720.html
CVE ID: CVE-2005-4254 State: PUBLISHED Published: 2005-12-15T11:00:00 Last Updated: 2024-08-07T23:38:51.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_Results.php in DreamLevels DreamPoll 3.0 final allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2880 - http://www.osvdb.org/21688 - http://pridels0.blogspot.com/2005/12/dreampoll-sql-inj.html - http://secunia.com/advisories/18014 - http://www.securityfocus.com/bid/15849
CVE ID: CVE-2005-4255 State: PUBLISHED Published: 2005-12-15T11:00:00 Last Updated: 2024-08-07T23:38:51.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded phrase parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18015 - http://pridels0.blogspot.com/2005/12/wikkawiki-xss-vuln.html - http://www.securityfocus.com/bid/15860 - http://www.vupen.com/english/advisories/2005/2887