Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-2657 State: PUBLISHED Published: 2005-09-16T04:00:00 Last Updated: 2024-08-07T22:45:01.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in common-lisp-controller 4.18 and earlier allows local users to gain privileges by compiling arbitrary code in the cache directory, which is executed by another user if the user has not run Common Lisp before. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22275 - http://secunia.com/advisories/16822/ - http://www.securityfocus.com/bid/14829 - http://www.debian.org/security/2005/dsa-811
CVE ID: CVE-2005-2658 State: PUBLISHED Published: 2005-09-15T04:00:00 Last Updated: 2024-08-07T22:45:01.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in utility.cpp in Turquoise SuperStat (turqstat) 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code via a date with a long month. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.alioth.debian.org/cgi-bin/cvsweb.cgi/turqstat/utility.cpp.diff?cvsroot=turqstat&r2=1.41&r1=1.40&f=u - http://www.securityfocus.com/bid/14852 - http://www.debian.org/security/2005/dsa-812
CVE ID: CVE-2005-2659 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T22:45:01.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35, as used in products such as KchmViewer, has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-886 - http://secunia.com/advisories/17775 - http://secunia.com/advisories/17325 - http://secunia.com/advisories/17494 - http://www.securityfocus.com/bid/15338 - http://mail-index.netbsd.org/pkgsrc-changes/2005/09/12/0010.html
CVE ID: CVE-2005-2660 State: PUBLISHED Published: 2005-09-30T04:00:00 Last Updated: 2024-08-07T22:45:01.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: apachetop 0.12.5 and earlier, when running in debug mode, allows local users to create or append to arbitrary files via a symlink attack on atop.debug. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014996 - http://www.zataz.net/adviso/apachetop-09022005.txt - http://securityreason.com/securityalert/38 - http://www.securityfocus.com/bid/14982 - http://bugs.gentoo.org/show_bug.cgi?id=104473
CVE ID: CVE-2005-2661 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T22:45:02.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17120 - http://www.gentoo.org/security/en/glsa/glsa-200603-04.xml - http://www.securityfocus.com/bid/15048 - http://www.vupen.com/english/advisories/2005/2014 - http://securityreason.com/securityalert/547 - http
s.com/bid/15048 - http://www.vupen.com/english/advisories/2005/2014 - http://securityreason.com/securityalert/547 - http://www.debian.org/security/2005/dsa-852 - http://secunia.com/advisories/17100/ - http://www.vupen.com/english/advisories/2005/2015 - http://secunia.com/advisories/19113
CVE ID: CVE-2005-2662 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:45:02.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not properly sanitized when creating a failed delivery message. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:168 - http://www.osvdb.org/displayvuln.php?osvdb_id=19583 - http://www.vupen.com/english/advisories/2005/1807 - http://secunia.com/advisories/16883 - http://secunia.com/advisories/17109 - https://exchange.xforce.ibmcloud.com/vul
7 - http://secunia.com/advisories/16883 - http://secunia.com/advisories/17109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22346 - http://www.securityfocus.com/bid/14890 - http://www.debian.org/security/2005/dsa-848
CVE ID: CVE-2005-2663 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:45:01.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22347 - http://www.vupen.com/english/advisories/2005/1807 - http://secunia.com/advisories/16883 - http://secunia.com/advisories/17109 - http://www.osvdb.org/displayvuln.php?osvdb_id=19584 - http://www.securityfocus.com/bid/14890 - http://www
sories/17109 - http://www.osvdb.org/displayvuln.php?osvdb_id=19584 - http://www.securityfocus.com/bid/14890 - http://www.debian.org/security/2005/dsa-848
CVE ID: CVE-2005-2664 State: PUBLISHED Published: 2005-08-22T04:00:00 Last Updated: 2024-08-07T22:45:01.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Whisper 32 1.16, and possibly earlier versions, stores passwords in plaintext in memory, which allows local users to obtain the password using a debugger or another mechanism to read process memory. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014730 - http://antilamo.skifstone.com/vuln/whisper32.txt - http://marc.info/?l=bugtraq&m=112438834310990&w=2 - http://www.securityfocus.com/bid/14600
CVE ID: CVE-2005-2665 State: PUBLISHED Published: 2005-08-23T04:00:00 Last Updated: 2024-08-07T22:45:02.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitrary code via an e-mail message with a long Expires header. Additional Analyst Notes: - CVE Program Container: References: - http://www.slackware.org/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.419306 - http://secunia.com/advisories/16508 - http://securitytracker.com/id?1014745 - http://www.redhat.com/support/errata/RHSA-2005-755.html - http://www.gentoo.org/security
ecuritytracker.com/id?1014745 - http://www.redhat.com/support/errata/RHSA-2005-755.html - http://www.gentoo.org/security/en/glsa/glsa-200510-15.xml - http://marc.info/?l=bugtraq&m=112472951529964&w=2 - http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0688.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:186 - http://www.securityfocus.com/advisories/9670 - http://www.securityfocus.com/bid/15117 - http://secunia.com/advisories/17475 - http://secunia.com/advisories/16554 - http://www.securityfocus.com/bid/14613 - http://www.slackware.org/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.423056
CVE ID: CVE-2005-2666 State: PUBLISHED Published: 2005-08-23T04:00:00 Last Updated: 2024-08-07T22:45:01.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the known_hosts file, which makes it easier for an attacker that has compromised an SSH user's account to generate a list of additional targets that are more likely to have the same password or key. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10201 - http://secunia.com/advisories/25098 -
cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10201 - http://secunia.com/advisories/25098 - http://www.redhat.com/support/errata/RHSA-2007-0257.html - http://secunia.com/advisories/19243 - http://www.eweek.com/article2/0%2C1759%2C1815795%2C00.asp - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-2006.11.txt - http://nms.csail.mit.edu/projects/ssh/
CVE ID: CVE-2005-2667 State: PUBLISHED Published: 2005-08-23T04:00:00 Last Updated: 2024-08-07T22:45:01.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows attackers to cause a denial of service via unknown vectors, aka the "CAM TCP port vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32919 - http://www.osvdb.org/18915 - http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.asp - http://www.securityfocus.com/bid/14621 - http://secu
pportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.asp - http://www.securityfocus.com/bid/14621 - http://secunia.com/advisories/16513 - http://www.vupen.com/english/advisories/2005/1482
CVE ID: CVE-2005-2668 State: PUBLISHED Published: 2005-08-23T04:00:00 Last Updated: 2024-08-07T22:45:01.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14622 - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32919 - http://www.osvdb.org/18916 - http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.asp - http://secunia.com/advisories/16513 - http
http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.asp - http://secunia.com/advisories/16513 - http://www.kb.cert.org/vuls/id/619988 - http://www.vupen.com/english/advisories/2005/1482
CVE ID: CVE-2005-2669 State: PUBLISHED Published: 2005-08-23T04:00:00 Last Updated: 2024-08-07T22:45:01.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote attackers to execute arbitrary commands via spoofed CAFT packets. Additional Analyst Notes: - CVE Program Container: References: - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32919 - http://www.osvdb.org/18917 - http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.asp - http://secunia.com/advisories/16513 - http://www.securityfocus.com/bid/14623 - http://www.vupen.com/en
rity_notice.asp - http://secunia.com/advisories/16513 - http://www.securityfocus.com/bid/14623 - http://www.vupen.com/english/advisories/2005/1482
CVE ID: CVE-2005-2670 State: PUBLISHED Published: 2005-08-23T04:00:00 Last Updated: 2024-08-07T22:45:02.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall allows remote attackers to overwrite arbitrary files via ".." sequences in filenames contained in (1) ACE, (2) ARJ, (3) CAB, (4) LZH, (5) RAR, (6) TAR and (7) ZIP files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2005-24/advisory - http://www.securityfocus.com/bid/14606 - http://secunia.com/advisories/15846 - http://www.globalhauri
2005-24/advisory - http://www.securityfocus.com/bid/14606 - http://secunia.com/advisories/15846 - http://www.globalhauri.com/html/download/down_unixpatch.html - http://securitytracker.com/id?1014740
CVE ID: CVE-2005-2671 State: REJECTED Published: 2005-08-23T04:00:00 Last Updated: 2005-11-02T10:00:00 Description: No description available.
CVE ID: CVE-2005-2672 State: PUBLISHED Published: 2005-08-23T04:00:00 Last Updated: 2024-08-07T22:45:01.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secure.netroedge.com/~lm78/cvs/lm_sensors2/CHANGES - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=324193 - http://securitytracker.com/id?1015180 - https://usn.ubuntu.com/172-1/ - http://secunia.com/advisories/17535 - http://secunia.com/advisories/16501 - http://www.redhat.c
/usn.ubuntu.com/172-1/ - http://secunia.com/advisories/17535 - http://secunia.com/advisories/16501 - http://www.redhat.com/support/errata/RHSA-2005-825.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9993 - http://www.securityfocus.com/bid/14624 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:149 - http://secunia.com/advisories/17499 - http://www.vupen.com/english/advisories/2005/1492 - http://www.debian.org/security/2005/dsa-814
CVE ID: CVE-2005-2673 State: PUBLISHED Published: 2005-08-23T04:00:00 Last Updated: 2024-08-07T22:45:01.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers to execute arbitrary SQL commands via the (1) x or (2) y parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014746 - http://www.securityfocus.com/bid/14617
CVE ID: CVE-2005-2674 State: PUBLISHED Published: 2005-08-23T04:00:00 Last Updated: 2024-08-07T22:45:01.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Note: the vendor has disputed this issue. Multiple cross-site scripting (XSS) vulnerabilities in Land Down Under (LDU) 800 allow remote attackers to inject arbitrary web script or HTML via the (1) c or (2) m parameters to index.php or (3) w parameter to journal.php. NOTE: this issue has been disputed by the vendor, who says "None of the tricks written there are working, the variables are properly sanitized and no LDU version is affected. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtr
d no LDU version is affected. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112456235729717&w=2 - http://securitytracker.com/id?1014747 - http://www.neocrome.net - http://www.securityfocus.com/bid/14619
CVE ID: CVE-2005-2675 State: PUBLISHED Published: 2005-08-23T04:00:00 Last Updated: 2024-08-07T22:45:01.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Note: the vendor has disputed this issue. Multiple SQL injection vulnerabilities in Land Down Under (LDU) 800 allow remote attackers to execute arbitrary SQL commands via the (1) s or (2) m parameter to forums.php, (3) o, (4) w, (5) s, or (6) p parameter to list.php, (7) m parameter to journal.php, (8) x or (9) n parameter to forums.php, or (10) w parameter to links.php. NOTE: this issue has been disputed by the vendor, who says "None of the tricks written there are working, the variables are properly sanitized and no LDU vers
the vendor, who says "None of the tricks written there are working, the variables are properly sanitized and no LDU version is affected. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112456235729717&w=2 - http://securitytracker.com/id?1014747 - http://www.neocrome.net - http://www.securityfocus.com/bid/14618
CVE ID: CVE-2005-2676 State: PUBLISHED Published: 2005-08-23T04:00:00 Last Updated: 2024-08-07T22:45:01.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in displayimage.php in Coppermine Photo Gallery before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via EXIF data. Additional Analyst Notes: - CVE Program Container: References: - http://coppermine-gallery.net/forum/index.php?topic=20933.0 - http://secunia.com/advisories/16499 - http://securitytracker.com/id?1014799 - http://www.securityfocus.com/bid/14625
CVE ID: CVE-2005-2677 State: PUBLISHED Published: 2005-08-23T04:00:00Z Last Updated: 2024-09-16T18:59:23.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: ACNews stores the database in a file under the web document root with a db.inc extension and insufficient access control, which allows remote attackers to obtain sensitive information such as the full pathname of the server. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014749
CVE ID: CVE-2005-2678 State: PUBLISHED Published: 2005-08-23T04:00:00 Last Updated: 2024-08-07T22:45:02.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass security checks and conduct various attacks via a GET request with an http://localhost URI, which makes it appear as if the request is coming from localhost. Additional Analyst Notes: - CVE Program Container: References: - http://ingehenriksen.blogspot.com/2005/08/remote-iis-5x-and-iis-60-server-name.html - http://www.vupen.com/english/advisories/2005/1503 - http://secunia.com/advisories/16548 - http://marc.info/?l=bugtraq&m=11247472790
vupen.com/english/advisories/2005/1503 - http://secunia.com/advisories/16548 - http://marc.info/?l=bugtraq&m=112474727903399&w=2
CVE ID: CVE-2005-2679 State: PUBLISHED Published: 2005-08-23T04:00:00Z Last Updated: 2024-09-17T03:59:27.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14616 - http://securitytracker.com/id?1014742 - http://secunia.com/advisories/16525 - http://www.sysinternals.com/Forum/forum_posts.asp?TID=957&PN=1
CVE ID: CVE-2005-2680 State: PUBLISHED Published: 2005-08-23T04:00:00 Last Updated: 2024-08-07T22:45:02.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP4, when using entitlements, allows remote attackers to bypass access restrictions for the pages of a Book via crafted URLs. Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/pub/advisory/137
CVE ID: CVE-2005-2681 State: PUBLISHED Published: 2005-08-23T04:00:00 Last Updated: 2024-08-07T22:45:01.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the command line processing (CLI) logic in Cisco Intrusion Prevention System 5.0(1) and 5.0(2) allows local users with OPERATOR or VIEWER privileges to gain additional privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16545 - http://www.cisco.com/warp/public/707/cisco-sa-20050824-ips.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/21947 - http://www.securityfocus.com/bid/14633
CVE ID: CVE-2005-2682 State: PUBLISHED Published: 2005-08-23T04:00:00 Last Updated: 2024-08-07T22:45:02.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: aspell_setup.php in the SpellChecker plugin in DTLink AreaEdit before 0.4.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the dictionary parameter (aka the lang variable). Additional Analyst Notes: - CVE Program Container: References: - http://www.formvista.com/otherprojects/areaedit - http://www.formvista.com/forum.html?COMP=forum&cmd=view_thread&%28fvs%29cs_forums_threads_ref=47 - http://secunia.com/advisories/16511
CVE ID: CVE-2005-2683 State: PUBLISHED Published: 2005-08-23T04:00:00 Last Updated: 2024-08-07T22:45:02.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHPKit 1.6.1 allow remote attackers to execute arbitrary SQL commands via the (1) letter parameter to login/member.php or (2) im_receiver parameter to login/imcenter.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14629 - http://secunia.com/advisories/16531/ - http://marc.info/?l=bugtraq&m=112474427221031&w=2
CVE ID: CVE-2005-2684 State: PUBLISHED Published: 2005-08-23T04:00:00Z Last Updated: 2024-09-16T16:48:10.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: nquser.php in Virtual Edge Netquery 3.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter to a dig query. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014750
CVE ID: CVE-2005-2685 State: PUBLISHED Published: 2005-08-24T04:00:00Z Last Updated: 2024-09-16T21:08:27.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via a direct request to admin/PhpMyExplorer/editerfichier.php, then editing the desired file to contain the PHP code, as demonstrated using header.php in the fichier parameter. NOTE: it is possible that this vulnerability stems from PhpMyExplorer, which is a separate package. Additional Analyst Notes: - CVE Program Container: References: - http://rgod.altervista.org/save_yourself_from_savewebportal34.html - http://secunia.com/advisories/16522
CVE ID: CVE-2005-2686 State: PUBLISHED Published: 2005-08-24T04:00:00Z Last Updated: 2024-09-16T22:45:12.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SaveWebPortal 3.4 allows remote attackers to include arbitrary files and execute arbitrary local PHP programs via ".." sequences in the (1) SITE_Path parameter to menu_dx.php or (2) CONTENTS_Dir parameter to menu_sx.php. Additional Analyst Notes: - CVE Program Container: References: - http://rgod.altervista.org/save_yourself_from_savewebportal34.html - http://secunia.com/advisories/16522
CVE ID: CVE-2005-2687 State: PUBLISHED Published: 2005-08-24T04:00:00 Last Updated: 2024-08-07T22:45:02.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via the (1) SITE_Path parameter to menu_dx.php or (2) CONTENTS_Dir parameter to menu_sx.php. Additional Analyst Notes: - CVE Program Container: References: - http://rgod.altervista.org/save_yourself_from_savewebportal34.html - http://secunia.com/advisories/16522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28182
CVE ID: CVE-2005-2688 State: PUBLISHED Published: 2005-08-24T04:00:00Z Last Updated: 2024-09-16T19:29:58.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SaveWebPortal 3.4 allow remote attackers to inject arbitrary web script or HTML via a large number of parameters to (1) footer.php, (2) header.php, (3) menu_dx.php, or (4) menu_sx.php, or Javascript code in the (5) HTTP_REFERER (referer) or (6) HTTP_USER_AGENT (user agent) fields. Additional Analyst Notes: - CVE Program Container: References: - http://rgod.altervista.org/save_yourself_from_savewebportal34.html - http://secunia.com/advisories/16522
CVE ID: CVE-2005-2689 State: PUBLISHED Published: 2005-08-24T04:00:00Z Last Updated: 2024-09-16T23:02:06.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.760-RC4b allows remote attackers to inject arbitrary web script or HTML via (1) the moderate parameter to the Comments module or (2) htmltext parameter to html/user.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/408818 - http://www.securityfocus.com/bid/14635