Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-3527 State: PUBLISHED Published: 2005-11-09T01:00:00 Last Updated: 2024-08-07T23:17:22.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in do_coredump in signal.c in Linux kernel 2.6 allows local users to cause a denial of service by triggering a core dump in one thread while another thread has a pending SIGSTOP. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17917 - http://www.securityfocus.com/advisories/9806 - http://www.kernel.org/git/?p=linux/kernel/git/davem/sparc-2.6.git%3Ba=commitdiff%3Bh=788e05a67c343fa22f2ae1d3ca264e7f15c25eaf - http://www.securityfocus.com/archive/1/419522/100/0/threaded
a=commitdiff%3Bh=788e05a67c343fa22f2ae1d3ca264e7f15c25eaf - http://www.securityfocus.com/archive/1/419522/100/0/threaded - http://www.securityfocus.com/archive/1/427981/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2006:018 - http://www.securityfocus.com/bid/15723 - http://secunia.com/advisories/17918
CVE ID: CVE-2005-3528 State: PUBLISHED Published: 2005-11-20T22:00:00 Last Updated: 2024-08-07T23:17:22.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in tiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to inject arbitrary web script or HTML via the topics_offset parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17521 - http://www.securityfocus.com/archive/1/416152/30/0/threaded - http://www.vupen.com/english/advisories/2005/2376 - http://www.securityfocus.com/bid/15371 - http://moritz-naumann.com/adv/0003/tikiw/0003.txt
CVE ID: CVE-2005-3529 State: PUBLISHED Published: 2005-11-20T22:00:00 Last Updated: 2024-08-07T23:17:22.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: tiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to obtain the installation path via an invalid topics_sort_mode parameter, possibly related to an SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17521 - http://www.securityfocus.com/archive/1/416152/30/0/threaded - http://www.vupen.com/english/advisories/2005/2376 - http://www.osvdb.org/20711 - http://securityreason.com/securityalert/165 - http://moritz-naumann.com/adv/
es/2005/2376 - http://www.osvdb.org/20711 - http://securityreason.com/securityalert/165 - http://moritz-naumann.com/adv/0003/tikiw/0003.txt
CVE ID: CVE-2005-3530 State: PUBLISHED Published: 2005-11-20T22:00:00 Last Updated: 2024-08-07T23:17:23.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Antville 1.1 allows remote attackers to inject arbitrary web script or HTML via the notfound.skin error document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15372 - http://www.osvdb.org/20709 - http://www.vupen.com/english/advisories/2005/2377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23032 - http://securityreason.com/securityalert/166 - http://moritz-naumann.com/adv/0004/antvxss/0004.txt - http://marc.info/?l=bugtra
/securityreason.com/securityalert/166 - http://moritz-naumann.com/adv/0004/antvxss/0004.txt - http://marc.info/?l=bugtraq&m=113156739212557&w=2 - http://secunia.com/advisories/17520/
CVE ID: CVE-2005-3531 State: PUBLISHED Published: 2005-11-23T00:00:00 Last Updated: 2024-08-07T23:17:22.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200511-17.xml - http://www.securityfocus.com/bid/15529 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:216 - http://secunia.com/advisories/17691 - http://secunia.com/advisories/17695 - http
curity/advisories?name=MDKSA-2005:216 - http://secunia.com/advisories/17691 - http://secunia.com/advisories/17695 - http://www.vupen.com/english/advisories/2005/2529
CVE ID: CVE-2005-3532 State: PUBLISHED Published: 2005-12-11T01:00:00 Last Updated: 2024-08-07T23:17:22.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: authpam.c in courier-authdaemon for Courier Mail Server 0.37.3 through 0.52.1, when using pam_tally, does not call the pam_acct_mgmt function to verify that access should be granted, which allows attackers to authenticate to the server using accounts that have been disabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-917 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=211920 - http://secunia.com/advisories/17919 - https://exchange.xforce.ibmcloud.com/vulnerabilit
i-bin/bugreport.cgi?bug=211920 - http://secunia.com/advisories/17919 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23532 - http://www.securityfocus.com/bid/15771/ - http://secunia.com/advisories/17999 - https://usn.ubuntu.com/226-1/
CVE ID: CVE-2005-3533 State: PUBLISHED Published: 2005-12-11T02:00:00 Last Updated: 2024-08-07T23:17:23.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in OSH before 1.7-15 allows local users to execute arbitrary code via a long current working directory and filename. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17967 - http://www.debian.org/security/2005/dsa-918 - http://www.vupen.com/english/advisories/2005/2812 - http://www.securityfocus.com/bid/12455 - http://www.osvdb.org/21576
CVE ID: CVE-2005-3534 State: PUBLISHED Published: 2005-12-22T21:00:00 Last Updated: 2024-08-07T23:17:22.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43610 - http://secunia.com/advisories/18503 - http://www.debian.org/security/2005/dsa-924 - http://www.osvdb.org/21848 - http://secunia.com/advisories/182
ies/18503 - http://www.debian.org/security/2005/dsa-924 - http://www.osvdb.org/21848 - http://secunia.com/advisories/18209 - https://usn.ubuntu.com/237-1/ - http://secunia.com/advisories/18171 - http://www.securityfocus.com/bid/16029 - http://secunia.com/advisories/18135 - http://www.gentoo.org/security/en/glsa/glsa-200512-14.xml - http://sourceforge.net/project/shownotes.php?release_id=380210&group_id=13229 - http://sourceforge.net/mailarchive/forum.php?thread_id=9201144&forum_id=40388 - http://sourceforge.net/project/shownotes.php?release_id=380202&group_id=13229 - http://bugs.gentoo.org/show_bug.cgi?id=116314 - http://secunia.com/advisories/43353 - http://secunia.com/advisories/18315
CVE ID: CVE-2005-3535 State: PUBLISHED Published: 2005-12-27T23:00:00Z Last Updated: 2024-09-16T22:25:59.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in KETM 0.0.6 allows local users to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-926 - http://secunia.com/advisories/18225 - http://www.securityfocus.com/bid/16049/
CVE ID: CVE-2005-3536 State: PUBLISHED Published: 2005-12-22T23:00:00 Last Updated: 2024-08-07T23:17:23.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in phpBB 2 before 2.0.18 allows remote attackers to execute arbitrary SQL commands via the topic type. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15246 - http://www.debian.org/security/2005/dsa-925 - http://www.osvdb.org/22270 - http://secunia.com/advisories/18098
CVE ID: CVE-2005-3537 State: PUBLISHED Published: 2005-12-22T23:00:00Z Last Updated: 2024-09-17T03:17:49.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: A "missing request validation" error in phpBB 2 before 2.0.18 allows remote attackers to edit private messages of other users, probably by modifying certain parameters or other inputs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15246 - http://www.debian.org/security/2005/dsa-925 - http://secunia.com/advisories/18098
CVE ID: CVE-2005-3538 State: PUBLISHED Published: 2006-01-06T11:00:00 Last Updated: 2024-08-07T23:17:23.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18314 - http://secunia.com/advisories/18337 - http://www.hylafax.org/content/HylaFAX_4.2.4_release - http://www.gentoo.org/security/en/glsa/glsa-200601-03.xml - http://www.hylafax.org/archive/2005-12/msg00119.php - http://secunia.com/advisories/18489 - http://www.securityfocus.com/archive/1/420974/100/0
archive/2005-12/msg00119.php - http://secunia.com/advisories/18489 - http://www.securityfocus.com/archive/1/420974/100/0/threaded - http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719 - http://www.vupen.com/english/advisories/2006/0072 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:015 - http://www.securityfocus.com/bid/16150
CVE ID: CVE-2005-3539 State: PUBLISHED Published: 2006-01-06T11:00:00 Last Updated: 2024-08-07T23:17:23.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify script in HylaFAX 4.2.0 to 4.2.3 and (2) crafted CallID parameters to the faxrcvd script in HylaFAX 4.2.2 and 4.2.3. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18314 - http://www.securityfocus.com/bid/16151 - http://secunia.com/advisories/18366 - http://secunia.com/advisories/18337 - http://www.hylafax.org/content/HylaFAX_4.2.4_release -
unia.com/advisories/18366 - http://secunia.com/advisories/18337 - http://www.hylafax.org/content/HylaFAX_4.2.4_release - http://www.gentoo.org/security/en/glsa/glsa-200601-03.xml - http://secunia.com/advisories/18489 - http://www.debian.org/security/2005/dsa-933 - http://www.securityfocus.com/archive/1/420974/100/0/threaded - http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719 - http://www.vupen.com/english/advisories/2006/0072 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:015
CVE ID: CVE-2005-3540 State: PUBLISHED Published: 2006-01-09T18:00:00 Last Updated: 2024-08-07T23:17:23.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in petris before 1.0.1 allows remote attackers to execute arbitrary code via unspecified attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18384 - http://www.securityfocus.com/bid/16190 - http://www.debian.org/security/2005/dsa-929 - http://secunia.com/advisories/18362
CVE ID: CVE-2005-3542 State: REJECTED Published: 2005-11-16T07:37:00 Last Updated: 2005-11-22T10:00:00 Description: No description available.
CVE ID: CVE-2005-3543 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in Phorum 5.0.0alpha through 5.0.20, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the forum_ids parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/advisory-43.html - http://secunia.com/advisories/17456 - http://marc.info/?l=bugtraq&m=113122911424216&w=2 - http://securityreason.com/securityalert/153 - http://www.vupen.com/english/advisories/2005/2332 - http://www.osvdb.org/20524 - http://pho
ason.com/securityalert/153 - http://www.vupen.com/english/advisories/2005/2332 - http://www.osvdb.org/20524 - http://phorum.org/story.php?57
CVE ID: CVE-2005-3544 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in u2u.php in XMB 1.9.3 allows remote attackers to inject arbitrary web script or HTML via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22990 - http://www.securityfocus.com/bid/15342 - http://www.vupen.com/english/advisories/2005/2333 - http://www.securityfocus.com/archive/1/415800/30/0/threaded - http://secunia.com/advisories/17458 - https://docs.xmbforum2.com/index.php?title=Security_Issue
1/415800/30/0/threaded - http://secunia.com/advisories/17458 - https://docs.xmbforum2.com/index.php?title=Security_Issue_History
CVE ID: CVE-2005-3545 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php of the report module in ibProArcade 2.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibproarcade.com/index.php?showtopic=7576&pid=47373&st=0&#entry47373 - http://www.ibproarcade.com/index.php?showtopic=7575&pid=47370&st=0&#entry47370 - http://secunia.com/advisories/17457 - http://securityreason.com/securityalert/151 - http://www.vupen.com/english/advisories/2005
ecunia.com/advisories/17457 - http://securityreason.com/securityalert/151 - http://www.vupen.com/english/advisories/2005/2334 - http://www.securityfocus.com/archive/1/415793 - http://osvdb.org/20514 - http://www.securityfocus.com/bid/15333
CVE ID: CVE-2005-3546 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: suid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before 2.15.484 and (2) Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local users to gain privilege. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015160 - http://www.osvdb.org/20546 - http://www.osvdb.org/20543 - http://www.osvdb.org/20538 - http://www.osvdb.org/20540 - http://www.osvdb.org/20549 - http://secunia.com/advisories/17467 - http://www.f-secure.co
- http://www.osvdb.org/20540 - http://www.osvdb.org/20549 - http://secunia.com/advisories/17467 - http://www.f-secure.com/security/fsc-2005-3.shtml - http://www.osvdb.org/20544 - http://www.osvdb.org/20547 - http://www.vupen.com/english/advisories/2005/2331 - http://www.osvdb.org/20550 - http://www.osvdb.org/20541 - http://www.osvdb.org/20551 - http://www.osvdb.org/20537 - http://securitytracker.com/id?1015159 - http://www.osvdb.org/20545 - http://www.osvdb.org/20513 - http://www.osvdb.org/20552 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22966 - http://www.osvdb.org/20539 - http://www.osvdb.org/20548 - http://www.securityfocus.com/bid/15339 - http://www.osvdb.org/20542
CVE ID: CVE-2005-3547 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) adsess, (2) name, and (3) description parameters in admin.php, and the (4) ACP Notes, (5) Member Name, (6) Password, (7) Email Address, (8) Components, and multiple other input fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/415801/30/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/22999 - http://osvdb.or
yfocus.com/archive/1/415801/30/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/22999 - http://osvdb.org/20520 - http://osvdb.org/20519 - http://www.securityfocus.com/bid/15344 - http://secunia.com/advisories/17443 - http://osvdb.org/20518 - http://osvdb.org/20516 - http://osvdb.org/20517 - http://www.securityfocus.com/bid/15345 - http://osvdb.org/20521 - http://benji.redkod.org/audits/ipb.2.1.pdf - http://osvdb.org/20522
CVE ID: CVE-2005-3548 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Task Manager in Invision Power Board (IP.Board) 2.0.1 allows limited remote attackers to include files via a .. (dot dot) in the "Task PHP File To Run" field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17443 - http://www.securityfocus.com/archive/1/415798/30/0/threaded - http://www.osvdb.org/35429 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40000
CVE ID: CVE-2005-3549 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct code injection vulnerability in Task Manager in Invision Power Board 2.0.1 allows limited remote attackers to execute arbitrary code by referencing the file in "Task PHP File To Run" field and selecting "Run Task Now". Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40003 - http://secunia.com/advisories/17443 - http://www.securityfocus.com/archive/1/415798/30/0/threaded
CVE ID: CVE-2005-3550 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin.php in toendaCMS before 0.6.2 allows remote attackers to access arbitrary files via a .. (dot dot) in the id_user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17471 - http://www.vupen.com/english/advisories/2005/2343 - http://www.securityfocus.com/bid/15348 - http://www.securityfocus.com/archive/1/415975/30/0/threaded
CVE ID: CVE-2005-3551 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:22.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: toendaCMS before 0.6.2 stores user account and session data in the web root directory, which allows remote attackers to obtain sensitive information via a direct request to the appropriate XML file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17471 - http://www.vupen.com/english/advisories/2005/2343 - http://www.securityfocus.com/archive/1/415975/30/0/threaded
CVE ID: CVE-2005-3552 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHPKIT 1.6.1 R2 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple vectors in (1) login/profile.php, (2) login/userinfo.php, (3) admin/admin.php, (4) imcenter.php, and the (5) referer statistics, the (6) HTML title element and (7) logo alt attributes in forum postings, and the (8) Homepage field in the Guestbook. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23003 -
onal Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23003 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23008 - http://securitytracker.com/id?1015167 - http://www.osvdb.org/20553 - http://www.securityfocus.com/bid/15354 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23006 - http://www.osvdb.org/20558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23007 - http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/23009 - http://www.osvdb.org/20555 - http://www.vupen.com/english/advisories/2005/2344 - http://www.osvdb.org/20554 - http://www.osvdb.o
ww.osvdb.org/20555 - http://www.vupen.com/english/advisories/2005/2344 - http://www.osvdb.org/20554 - http://www.osvdb.org/20559 - http://secunia.com/advisories/17479 - http://www.hardened-php.net/advisory_212005.80.html - http://www.osvdb.org/20556 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23004 - http://www.osvdb.org/20557
CVE ID: CVE-2005-3553 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in include.php in PHPKIT 1.6.1 R2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in conjunction with the login/userinfo.php path and (2) the session parameter (aka the PHPKITSID variable). Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23010 - http://www.securityfocus.com/bid/15354 - http://www.osvdb.org/20560 - http://cert.uni-stutt
.com/vulnerabilities/23010 - http://www.securityfocus.com/bid/15354 - http://www.osvdb.org/20560 - http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html - http://www.vupen.com/english/advisories/2005/2344 - http://secunia.com/advisories/17479 - http://www.hardened-php.net/advisory_212005.80.html - http://www.osvdb.org/20561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23013
CVE ID: CVE-2005-3554 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple eval injection vulnerabilities in the help function in PHPKIT 1.6.1 R2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary code on the server via unknown attack vectors involving uninitialized variables. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015167 - http://www.securityfocus.com/bid/15354 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23015 - http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html - http
ge.xforce.ibmcloud.com/vulnerabilities/23015 - http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html - http://www.osvdb.org/20563 - http://www.vupen.com/english/advisories/2005/2344 - http://secunia.com/advisories/17479 - http://www.hardened-php.net/advisory_212005.80.html
CVE ID: CVE-2005-3555 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter in the (1) editattributes or (2) admin page. Additional Analyst Notes: - CVE Program Container: References: - http://www.trapkit.de/advisories/TKADV2005-11-001.txt - http://www.securityfocus.com/archive/1/416005/30/0/threaded - http://www.vupen.com/english/advisories/2005/2345 - http://osvdb.org/20568 - http://osvdb.org/20567 - http://secu
aded - http://www.vupen.com/english/advisories/2005/2345 - http://osvdb.org/20568 - http://osvdb.org/20567 - http://secunia.com/advisories/17476 - http://www.securityfocus.com/bid/15350