Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-1318 State: PUBLISHED Published: 2007-01-19T01:00:00 Last Updated: 2024-08-08T02:19:46.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Twilight Webserver 1.3.3.0 allows remote attackers to cause a denial of service (application crash) via a GET request for a long URI, a different vulnerability than CVE-2004-2376. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105820430209748&w=2 - http://www.securityfocus.com/bid/22090 - http://www.tripbit.org/advisories/twilight_advisory.txt
CVE ID: CVE-2003-1319 State: PUBLISHED Published: 2007-02-07T19:00:00 Last Updated: 2024-08-08T02:19:46.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in SmartFTP 1.0.973, and other versions before 1.0.976, allow remote attackers to execute arbitrary code via (1) a long response to a PWD command, which triggers a stack-based overflow, and (2) a long line in a response to a file LIST command, which triggers a heap-based overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/8998 - http://www.securityfocus.com/bid/7858 - http://security.nnov.ru/docs4679.html - http://securitytracker.com/id?1006956 - ht
tp://www.securityfocus.com/bid/7858 - http://security.nnov.ru/docs4679.html - http://securitytracker.com/id?1006956 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12231 - http://archives.neohapsis.com/archives/bugtraq/2003-06/0083.html - http://www.securityfocus.com/bid/7861 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12228
CVE ID: CVE-2003-1320 State: PUBLISHED Published: 2007-02-27T02:00:00Z Last Updated: 2024-09-16T22:08:48.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: SonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) a large number of payloads, or (3) a long payload. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/AAMN-5L74VD - http://www.kb.cert.org/vuls/id/287771
CVE ID: CVE-2003-1321 State: PUBLISHED Published: 2007-03-19T22:00:00 Last Updated: 2024-08-08T02:19:46.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Avant Browser 8.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/12974 - http://marc.info/?l=bugtraq&m=106150462504484&w=2 - http://www.securityfocus.com/bid/8471
CVE ID: CVE-2003-1322 State: PUBLISHED Published: 2007-03-21T23:00:00 Last Updated: 2024-08-08T02:19:46.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote attackers to execute arbitrary code via a long (1) EXAMINE, (2) DELETE, (3) SUBSCRIBE, (4) RENAME, (5) UNSUBSCRIBE, (6) LIST, (7) LSUB, (8) STATUS, (9) LOGIN, (10) CREATE, or (11) SELECT command. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/12203.php - http://www.securityfocus.com/archive/1/324136 - http://www.securityfocus.com/bid/7842
CVE ID: CVE-2003-1323 State: PUBLISHED Published: 2007-03-30T01:00:00Z Last Updated: 2024-09-17T02:47:53.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Elm ME+ 2.4 before PL109S, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.elmme-mailer.org/elm-2.4ME+PL109S.patch.gz
CVE ID: CVE-2003-1324 State: PUBLISHED Published: 2007-03-30T01:00:00Z Last Updated: 2024-09-16T17:04:07.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the can_open function in Elm ME+ 2.4, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group. Additional Analyst Notes: - CVE Program Container: References: - http://www.elmme-mailer.org/elm-2.4ME+PL109S.patch.gz
CVE ID: CVE-2003-1325 State: PUBLISHED Published: 2007-04-12T19:00:00Z Last Updated: 2024-09-16T16:14:06.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) via a certain connection string to UDP port 27015 that represents "absence of player informations," a related issue to CVE-2006-0734. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0304-exploits/hl-headnut.c - http://aluigi.altervista.org/adv/csdos.txt
CVE ID: CVE-2003-1326 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:19:46.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model to run malicious script or arbitrary programs via dialog boxes, aka "Improper Cross Domain Security Validation with dialog box." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6779 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A126 - http://www.iss.net/security_center/static/11258.php - http://www.ciac.org/ciac/bulletins/n-038.shtm
e.oval%3Adef%3A126 - http://www.iss.net/security_center/static/11258.php - http://www.ciac.org/ciac/bulletins/n-038.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A49 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A178 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-004
CVE ID: CVE-2003-1327 State: PUBLISHED Published: 2007-05-15T10:00:00 Last Updated: 2024-08-08T02:28:01.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAIL_ADMIN option enabled on a system that supports very long pathnames, might allow remote anonymous users to execute arbitrary code by uploading a file with a long pathname, which triggers the overflow when wu-ftpd constructs a notification message to the administrator. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13269 - http://www.slackware.org/security/viewer.
er: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13269 - http://www.slackware.org/security/viewer.php?l=slackware-security&y=2003&m=slackware-security.365971 - http://securitytracker.com/id?1007775 - http://www.securityfocus.com/bid/8668 - http://secunia.com/advisories/9835 - http://www.osvdb.org/2594 - http://archives.neohapsis.com/archives/bugtraq/2003-09/0348.html
CVE ID: CVE-2003-1328 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:28:01.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain security model and execute arbitrary code, aka "Improper Cross Domain Security Validation with ShowHelp functionality." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A57 - http://www.ciac.org/ciac/bulletins/n-038.shtml - http://www.securityfocus.com/bi
tion/oval%3Aorg.mitre.oval%3Adef%3A57 - http://www.ciac.org/ciac/bulletins/n-038.shtml - http://www.securityfocus.com/bid/6780 - http://www.kb.cert.org/vuls/id/400577 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0083.html - http://www.iss.net/security_center/static/11259.php - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-004
CVE ID: CVE-2003-1329 State: PUBLISHED Published: 2007-05-21T20:00:00Z Last Updated: 2024-09-16T23:55:39.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same local address," does not close failed connections, which allows remote attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/34670 - ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_2.6.2/connect-dos.patch
CVE ID: CVE-2003-1330 State: PUBLISHED Published: 2007-05-31T00:00:00 Last Updated: 2024-08-08T02:28:01.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clearswift MAILsweeper for SMTP 4.3.6 SP1 does not execute custom "on strip unsuccessful" hooks, which allows remote attackers to bypass e-mail attachment filtering policies via an attachment that MAILsweeper can detect but not remove. Additional Analyst Notes: - CVE Program Container: References: - http://www.mimesweeper.com/download/bin/Patches/MAILsweeper_Patches_301_ReadMe.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/11745 - http://www.securityfocus.com/bid/7226
CVE ID: CVE-2003-1331 State: PUBLISHED Published: 2007-06-25T23:00:00 Last Updated: 2024-08-08T02:28:01.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the mysql_real_connect function in the MySql client library (libmysqlclient) 4.0.13 and earlier allows local users to execute arbitrary code via a long socket name, a different vulnerability than CVE-2001-1453. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/12337 - http://www.securityfocus.com/bid/7887 - http://archives.neohapsis.com/archives/fulldisclosure/2003-q2/1303.html - http://bugs.mysql.com/bug.php?id=564
CVE ID: CVE-2003-1332 State: PUBLISHED Published: 2007-06-26T00:00:00 Last Updated: 2024-08-08T02:28:02.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the reply_nttrans function in Samba 2.2.7a and earlier allows remote attackers to execute arbitrary code via a crafted request, a different vulnerability than CVE-2003-0201. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-096.html - http://www.securiteam.com/exploits/5TP0M2AAKS.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/12749
CVE ID: CVE-2003-1333 State: PUBLISHED Published: 2007-08-20T19:00:00Z Last Updated: 2024-09-17T02:26:28.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Cache' Server Page (CSP) implementation in InterSystems Cache' 4.0.3 through 5.0.5 allows remote attackers to "gain complete control" of a server. Additional Analyst Notes: - CVE Program Container: References: - http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/8bdc0e496226edd1/60e9179edb4a4d43
CVE ID: CVE-2003-1334 State: PUBLISHED Published: 2007-08-23T01:00:00Z Last Updated: 2024-09-17T03:13:56.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) before 1.2.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.bitfolge.de/snif-en.html
CVE ID: CVE-2003-1335 State: PUBLISHED Published: 2007-08-23T01:00:00Z Last Updated: 2024-09-17T03:23:54.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) before 1.2.5 allows remote attackers to download files from locations above the snif directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.bitfolge.de/snif-en.html
CVE ID: CVE-2003-1336 State: PUBLISHED Published: 2007-09-23T23:00:00 Last Updated: 2024-08-08T02:28:01.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0060.html - http://www.osvdb.org/2665 - http://www.securiteam.com/windowsntfocus/6M00B0U8KE.html - http://secunia.com/advisories/9996 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13405 - http://www.securityfocus.com/bid/8819
CVE ID: CVE-2003-1337 State: PUBLISHED Published: 2007-09-23T23:00:00 Last Updated: 2024-08-08T02:28:02.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-06/0235.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/12466 - http://www.securityfocus.com/bid/8062
CVE ID: CVE-2003-1338 State: PUBLISHED Published: 2007-09-23T23:00:00Z Last Updated: 2024-09-17T01:40:40.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to inject arbitrary HTTP headers and possibly conduct HTTP Response Splitting attacks via CRLF sequences in the Location header. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-06/0235.html
CVE ID: CVE-2003-1339 State: PUBLISHED Published: 2007-09-23T23:00:00 Last Updated: 2024-08-08T02:28:01.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in eZnet.exe, as used in eZ (a) eZphotoshare, (b) eZmeeting, (c) eZnetwork, and (d) eZshare allows remote attackers to cause a denial of service (crash) or execute arbitrary code, as demonstrated via (1) a long GET request and (2) a long operation or autologin parameter to SwEzModule.dll. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2003/Dec/0195.html - https://www.exploit-db.com/exploits/133 - http://securitytracker.com/id?1008412 - http://marc.info/?
003/Dec/0195.html - https://www.exploit-db.com/exploits/133 - http://securitytracker.com/id?1008412 - http://marc.info/?l=bugtraq&m=107090390002654&w=2 - http://www.governmentsecurity.org/archive/t5390.html
CVE ID: CVE-2003-1340 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-08T02:28:02.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 5.6 and 6.5 allow remote authenticated users to execute arbitrary SQL commands via (1) a uid (user) cookie to modules.php; and allow remote attackers to execute arbitrary SQL commands via an aid (admin) cookie to the Web_Links module in a (2) viewlink, (3) MostPopular, or (4) NewLinksDate action, different vectors than CVE-2003-0279. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/323425 - http://securityr
l Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/323425 - http://securityreason.com/securityalert/3185 - http://www.securityfocus.com/archive/1/480866/100/0/threaded
CVE ID: CVE-2003-1341 State: PUBLISHED Published: 2007-10-14T19:00:00 Last Updated: 2024-08-08T02:28:02.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/6181 - http://secunia.com/advisories/7881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11059 - http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13353 - http://archives.neohapsis.c
erabilities/11059 - http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13353 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0020.html - http://www.securityfocus.com/bid/6616
CVE ID: CVE-2003-1342 State: PUBLISHED Published: 2007-10-14T19:00:00 Last Updated: 2024-08-08T02:28:02.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro Virus Control System (TVCS) 1.8 running with IIS allows remote attackers to cause a denial of service (memory consumption) in IIS via multiple URL requests for ActiveSupport.exe. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/7881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11060 - http://www.securityfocus.com/bid/6617 - http://www.osvdb.org/6185 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0020.html - http://archives.neohapsis.com/archives/vu
rg/6185 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0020.html - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html
CVE ID: CVE-2003-1343 State: PUBLISHED Published: 2007-10-14T19:00:00 Last Updated: 2024-08-08T02:28:02.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.exe, which allows remote attackers to gain access to the web management interface via the vcc parameter, possibly "3560121183d3". Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/7881 - http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13352 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11061 - http://www.securityfocus.com/bid/6619 - http://a
Id=13352 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11061 - http://www.securityfocus.com/bid/6619 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html
CVE ID: CVE-2003-1344 State: PUBLISHED Published: 2007-10-14T19:00:00 Last Updated: 2024-08-08T02:28:01.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro Virus Control System (TVCS) Log Collector allows remote attackers to obtain usernames, encrypted passwords, and other sensitive information via a URL request for getservers.exe with the action parameter set to "selects1", which returns log files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/7881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11063 - http://www.securityfocus.com/bid/6618 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html
CVE ID: CVE-2003-1345 State: PUBLISHED Published: 2007-10-14T19:00:00 Last Updated: 2024-08-08T02:28:02.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in s.dll in WebCollection Plus 5.00 allows remote attackers to view arbitrary files in c:\ via a full pathname in the d parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11064 - http://www.securityfocus.com/bid/6574 - http://marc.info/?l=bugtraq&m=104261317218210&w=2
CVE ID: CVE-2003-1346 State: PUBLISHED Published: 2007-10-14T19:00:00 Last Updated: 2024-08-08T02:28:03.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory default settings by upgrading the firmware using AirPlus Access Point Manager. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1005926 - http://marc.info/?l=bugtraq&m=104311601319909&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11074 - http://www.securityfocus.com/bid/6609 - http://marc.info/?l=bugtraq&m=104267037431451&w=2
CVE ID: CVE-2003-1347 State: PUBLISHED Published: 2007-10-14T19:00:00 Last Updated: 2024-08-08T02:28:02.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to comment.php, (2) uid parameter to profiles.php, (3) uid to users.php, and (4) homepage field. Additional Analyst Notes: - CVE Program Container: References: - http://www.geeklog.net/filemgmt/visit.php?lid=101 - http://www.securityfocus.com/bid/6602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11075 - http://www.securityfocus.com/bid/6603 - http://www.securityf
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/11075 - http://www.securityfocus.com/bid/6603 - http://www.securityfocus.com/bid/6604 - http://www.securityfocus.com/archive/1/306770 - http://www.securityfocus.com/bid/6601 - http://securityreason.com/securityalert/3226
CVE ID: CVE-2003-1348 State: PUBLISHED Published: 2007-10-14T19:00:00 Last Updated: 2024-08-08T02:28:03.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in guestbook.cgi in ftls.org Guestbook 1.1 allows remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) name, or (3) title field. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3227 - http://www.securityfocus.com/bid/6686 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11155 - http://www.securityfocus.com/archive/1/308312
CVE ID: CVE-2003-1349 State: PUBLISHED Published: 2007-10-14T19:00:00 Last Updated: 2024-08-08T02:28:02.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in NITE ftp-server (NiteServer) 1.83 allows remote attackers to list arbitrary directories via a "\.." (backslash dot dot) in the CD (CWD) command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/7879 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0022.html - http://www.securitytracker.com/id?1005923 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11062 - http://www.securityfocus.com/bid/6648
CVE ID: CVE-2003-1350 State: PUBLISHED Published: 2007-10-14T19:00:00 Last Updated: 2024-08-08T02:28:02.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: List Site Pro 2.0 allows remote attackers to hijack user accounts by inserting a "|" (pipe), which is used as a field delimiter, into the bannerurl field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/308300 - http://securityreason.com/securityalert/3230 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11156 - http://www.securityfocus.com/bid/6685
CVE ID: CVE-2003-1351 State: PUBLISHED Published: 2007-10-14T19:00:00 Last Updated: 2024-08-08T02:28:03.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in edittag.cgi in EditTag 1.1 allows remote attackers to read arbitrary files via a "%2F.." (encoded slash dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11159 - http://www.securityfocus.com/bid/6675 - http://www.securityfocus.com/archive/1/308162 - http://securityreason.com/securityalert/3231