Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-1626 State: PUBLISHED Published: 2005-05-17T04:00:00Z Last Updated: 2024-09-16T19:57:34.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in handlers.c for Pico Server (pServ) before 3.3 may allow attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13648 - http://sourceforge.net/project/shownotes.php?release_id=327708
CVE ID: CVE-2005-1627 State: PUBLISHED Published: 2005-05-17T04:00:00 Last Updated: 2024-08-07T21:59:24.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Viewglob before 2.0.1, related to "a potential security issue with the Viewglob display and ssh X forwarding," has unknown impact. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20559 - http://www.osvdb.org/16170 - http://securitytracker.com/id?1013937 - http://sourceforge.net/project/shownotes.php?release_id=325574
CVE ID: CVE-2005-1628 State: PUBLISHED Published: 2005-05-17T04:00:00 Last Updated: 2024-08-07T21:59:23.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.soulblack.com.ar/repo/tools/sbwebapp.txt - http://www.securityfocus.com/archive/1/449517/100/200/threaded - http://www.securityfocus.com/bid/13637 - http://www.defacers.com.mx/advisories/3.txt - http://www.securityfocus.com/archive/1/449573/100/200/threaded - http://www.vupen.com/english/adviso
/advisories/3.txt - http://www.securityfocus.com/archive/1/449573/100/200/threaded - http://www.vupen.com/english/advisories/2005/0554
CVE ID: CVE-2005-1629 State: PUBLISHED Published: 2005-05-17T04:00:00Z Last Updated: 2024-09-16T17:14:39.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL commands via the verifykey parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/lists/fulldisclosure/2005/May/0311.html - http://www.securityfocus.com/bid/13620
CVE ID: CVE-2005-1630 State: PUBLISHED Published: 2005-05-17T04:00:00 Last Updated: 2024-08-07T21:59:23.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Attachment Mod before 2.3.13, related to a "serious issue with realnames," has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15327 - http://sourceforge.net/project/shownotes.php?release_id=326408
CVE ID: CVE-2005-1631 State: PUBLISHED Published: 2005-05-17T04:00:00 Last Updated: 2024-08-07T21:59:23.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: booby.php in Booby 1.0.0 and earlier allows remote attackers to view private bookmarks by guessing item IDs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15305 - http://sourceforge.net/project/shownotes.php?release_id=326826 - http://www.securityfocus.com/bid/13623 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20605
CVE ID: CVE-2005-1632 State: PUBLISHED Published: 2005-05-17T04:00:00Z Last Updated: 2024-09-17T03:48:33.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15386 - http://sourceforge.net/mailarchive/forum.php?thread_id=7070332&forum_id=1542 - http://www.osvdb.org/16622
CVE ID: CVE-2005-1633 State: PUBLISHED Published: 2005-05-17T04:00:00 Last Updated: 2024-08-07T21:59:23.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) anzahl_beitraege parameter to jgs_portal.php, 2) year parameter to (jgs_portal_statistik.php, 3) year parameter to (jgs_portal_beitraggraf.php, 4) tag parameter to (jgs_portal_viewsgraf.php, 5) year parameter to (jgs_portal_themengraf.php, 6) year parameter to (jgs_portal_mitgraf.php, 7) id parameter to jgs_portal_sponsor.php, or (8) the Accept-Language header to jgs_portal_log.php.
_portal_mitgraf.php, 7) id parameter to jgs_portal_sponsor.php, or (8) the Accept-Language header to jgs_portal_log.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111627681218415&w=2
CVE ID: CVE-2005-1634 State: PUBLISHED Published: 2005-05-17T04:00:00 Last Updated: 2024-08-07T21:59:23.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) anzahl_beitraege parameter to jgs_portal.php, (2) year parameter to jgs_portal_statistik.php, (3) year parameter to jgs_portal_beitraggraf.php, (4) tag parameter to jgs_portal_viewsgraf.php, (5) year parameter to jgs_portal_themengraf.php, (6) year parameter to jgs_portal_mitgraf.php, (7) id parameter to jgs_portal_sponsor.php, or (8) the Accept-Language header to
r parameter to jgs_portal_mitgraf.php, (7) id parameter to jgs_portal_sponsor.php, or (8) the Accept-Language header to jgs_portal_log.php. NOTE: this issue may stem from the same core problem as CVE-2005-1633. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111627681218415&w=2
CVE ID: CVE-2005-1635 State: PUBLISHED Published: 2005-05-17T04:00:00 Last Updated: 2024-08-07T21:59:23.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: JGS-XA JGS-Portal 3.0.2 and earlier allows remote attackers to obtain the full server path via direct requests to (1) jgs_portal_ref.php, (2) jgs_portal_land.php, (3) jgs_portal_log.php, (4) jgs_portal_global_sponsor.php, (5) jgs_portal_global.php, (6) jgs_portal_system.php, (7) jgs_portal_views.php; or multiple files in the jgs_portal_include directory, including (8) jgs_portal_boardmenue.php, (9) jgs_portal_forenliste.php, (10) jgs_portal_geburtstag.php, (11) jgs_portal_guckloch.php, (12) jgs_portal_kalender.php, (13) jgs_po
_forenliste.php, (10) jgs_portal_geburtstag.php, (11) jgs_portal_guckloch.php, (12) jgs_portal_kalender.php, (13) jgs_portal_letztethemen.php, (14) jgs_portal_links.php, (15) jgs_portal_neustemember.php, (16) jgs_portal_newsboard.php, (17) jgs_portal_online.php, (18) jgs_portal_pn.php, (19) jgs_portal_portalmenue.php, (20) jgs_portal_styles.php, (21) jgs_portal_suchen.php, (22) jgs_portal_team.php, (23) jgs_portal_topforen.php, (24) jgs_portal_topposter.php, (25) jgs_portal_umfrage.php, (26) jgs_portal_useravatar.php, (27) jgs_portal_waronline.php, (28) jgs_portal_woonline.php, or (29) jgs_portal_zufallsavatar.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.
php, or (29) jgs_portal_zufallsavatar.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111627681218415&w=2
CVE ID: CVE-2005-1636 State: PUBLISHED Published: 2005-05-17T04:00:00 Last Updated: 2024-08-07T21:59:23.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: mysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X file with a predictable filename and insecure permissions, which allows local users to execute arbitrary SQL commands by modifying the file's contents. Additional Analyst Notes: - CVE Program Container: References: - http://www.zataz.net/adviso/mysql-05172005.txt - http://secunia.com/advisories/15369 - http://secunia.com/advisories/17080 - http://marc.info/?l=full-disclosure&m=111632686805498&w=2 - http://www.securityfocus.com/bid/
nia.com/advisories/17080 - http://marc.info/?l=full-disclosure&m=111632686805498&w=2 - http://www.securityfocus.com/bid/13660 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9504 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=158688 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:045 - http://www.redhat.com/support/errata/RHSA-2005-685.html
CVE ID: CVE-2005-1637 State: PUBLISHED Published: 2005-05-17T04:00:00Z Last Updated: 2024-09-17T01:06:13.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in NPDS 4.8 and 5.0 allow remote attackers to execute arbitrary SQL commands via the thold parameter to (1) comments.php or (2) pollcomments.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.npds.org/article.php?sid=1258 - http://securitytracker.com/id?1013973
CVE ID: CVE-2005-1638 State: PUBLISHED Published: 2005-05-17T04:00:00Z Last Updated: 2024-09-16T22:01:47.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _writeAttrs function in SafeHTML before 1.3.2 does not properly handle quotes in attribute values, which could allow remote attackers to exploit cross-site scripting (XSS) vulnerabilities in applications that rely on SafeHTML for protection. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16612 - http://pixel-apes.com/safehtml/feed - http://secunia.com/advisories/15371
CVE ID: CVE-2005-1639 State: PUBLISHED Published: 2005-05-17T04:00:00Z Last Updated: 2024-09-17T00:42:13.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Sigmaweb.DLL in Sigma ISP Manager 6.6 allows remote attackers to execute arbitrary SQL commands via the (1) username, (2) password, or (3) domain fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.under9round.com/sigma.txt - http://www.osvdb.org/16620 - http://secunia.com/advisories/15379
CVE ID: CVE-2005-1640 State: PUBLISHED Published: 2005-05-17T04:00:00 Last Updated: 2024-08-07T21:59:23.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_channel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a host has the owner privileges required to delete IRC channel access entries, which allows remote attackers to bypass intended restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15388 - http://www.ignition-project.com/security/20050414-hosts-delete-owner-access-entries
CVE ID: CVE-2005-1641 State: PUBLISHED Published: 2005-05-17T04:00:00Z Last Updated: 2024-09-16T17:38:18.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_channel in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not allow protected operators to access channels that have been locked out by a key, which allows IRC users to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.ignition-project.com/security/20050515-protected-opers-cannot-join-channel-with-key - http://secunia.com/advisories/15388
CVE ID: CVE-2005-1642 State: PUBLISHED Published: 2005-05-17T04:00:00 Last Updated: 2024-08-07T21:59:23.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the verify_email function in Woltlab Burning Board 2.x and earlier allows remote attackers to execute arbitrary SQL commands via the $email variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.gulftech.org/?node=research&article_id=00075-05162005 - http://www.vupen.com/english/advisories/2005/0558 - http://www.attrition.org/pipermail/vim/2005-May/000047.html - http://secunia.com/advisories/15395 - http://archives.neohapsis.com/archives/bugtraq/2005-05/0199.html -
/000047.html - http://secunia.com/advisories/15395 - http://archives.neohapsis.com/archives/bugtraq/2005-05/0199.html - http://www.osvdb.org/16575
CVE ID: CVE-2005-1643 State: PUBLISHED Published: 2005-05-17T04:00:00 Last Updated: 2024-08-07T21:59:23.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZCom_BitStream::Deserialize function in Zoidcom 1.0 beta 4 and earlier allows remote attackers to cause a denial of service via a crafted UDP packet with a large size value, which causes a memory allocation error or an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.zoidcom.com/download/changelog.txt - http://aluigi.altervista.org/adv/zoidboom-adv.txt - http://www.osvdb.org/16495 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20511 - http://archives.neohapsis.com/arch
://www.osvdb.org/16495 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20511 - http://archives.neohapsis.com/archives/bugtraq/2005-05/0107.html - http://securitytracker.com/id?1013939
CVE ID: CVE-2005-1644 State: PUBLISHED Published: 2005-05-18T04:00:00 Last Updated: 2024-08-07T21:59:23.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in guestbook.php for 1Two Livre d'Or 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) livreornom, (2) livreoremail, or (3) livreormessage parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16717 - http://www.securityfocus.com/bid/13631 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20589 - http://securitytracker.com/id?1013971
CVE ID: CVE-2005-1645 State: PUBLISHED Published: 2005-05-18T04:00:00 Last Updated: 2024-08-07T21:59:23.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Keyvan1 ImageGallery stores the image.mdb database under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013970 - http://www.securityfocus.com/bid/13630 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20592 - http://secunia.com/advisories/15362 - http://www.osvdb.org/16618
CVE ID: CVE-2005-1646 State: PUBLISHED Published: 2005-05-18T04:00:00 Last Updated: 2024-08-07T21:59:23.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installation of Fastream NETFile FTP/Web Server 7.4.6, which supports FXP, does not require that the IP address in a PORT command be the same as the IP of the logged in user, which allows remote attackers to conduct FTP Bounce attacks to bypass firewall rules or cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/0556 - http://secunia.com/advisories/15394 - http://www.osvdb.org/16621 - http://www.security.org.sg/vuln/netfileftp746p
0556 - http://secunia.com/advisories/15394 - http://www.osvdb.org/16621 - http://www.security.org.sg/vuln/netfileftp746port.html
CVE ID: CVE-2005-1647 State: PUBLISHED Published: 2005-05-18T04:00:00Z Last Updated: 2024-09-16T16:52:43.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gurgens (GASoft) Guest Book 2.1 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and decrypt usernames and passwords. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15373 - http://securitytracker.com/id?1013976 - http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0351.html
CVE ID: CVE-2005-1648 State: PUBLISHED Published: 2005-05-18T04:00:00Z Last Updated: 2024-09-17T02:21:44.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gurgens (GASoft) Ultimate Forum 1.0 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and decrypt usernames and passwords. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013974 - http://secunia.com/advisories/15374 - http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0350.html
CVE ID: CVE-2005-1649 State: PUBLISHED Published: 2005-05-18T04:00:00 Last Updated: 2024-08-07T21:59:24.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv6 support in Windows XP SP2, 2003 Server SP1, and Longhorn, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, a variant of CVE-2005-0688 and a reoccurrence of the "Land" vulnerability (CVE-1999-0016). Additional Analyst Notes: - CVE Program Container: References: - http://www.ntbugtraq.com/default.aspx?pid=36&sid=1&A2=ind0505&L=NTBUGTRAQ&P=R409&D=0&F=N&H=0&O=D&T=0 - http://w
ences: - http://www.ntbugtraq.com/default.aspx?pid=36&sid=1&A2=ind0505&L=NTBUGTRAQ&P=R409&D=0&F=N&H=0&O=D&T=0 - http://www.vupen.com/english/advisories/2005/0559 - http://www.securityfocus.com/bid/13658
CVE ID: CVE-2005-1650 State: PUBLISHED Published: 2005-05-18T04:00:00Z Last Updated: 2024-09-17T04:29:29.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15268 - http://www.securityfocus.com/bid/13597
CVE ID: CVE-2005-1651 State: PUBLISHED Published: 2005-05-18T04:00:00Z Last Updated: 2024-09-17T00:25:39.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) in the wmm parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15268 - http://www.securityfocus.com/bid/13597
CVE ID: CVE-2005-1652 State: PUBLISHED Published: 2005-05-18T04:00:00Z Last Updated: 2024-09-17T03:18:35.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to bypass authentication by modifying the email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15268 - http://www.securityfocus.com/bid/13597
CVE ID: CVE-2005-1653 State: PUBLISHED Published: 2005-05-18T04:00:00Z Last Updated: 2024-09-16T18:55:36.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to inject arbitrary web script or HTML via the email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15268 - http://www.securityfocus.com/bid/13597
CVE ID: CVE-2005-1654 State: PUBLISHED Published: 2005-05-18T04:00:00Z Last Updated: 2024-09-17T03:59:57.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters set. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15271 - http://isun.shabgard.org/hc3.txt
CVE ID: CVE-2005-1655 State: PUBLISHED Published: 2005-05-18T04:00:00Z Last Updated: 2024-09-16T23:06:54.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an invalid smiley icon location in the sml parameter of a font tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13553
CVE ID: CVE-2005-1656 State: PUBLISHED Published: 2005-05-18T04:00:00Z Last Updated: 2024-09-17T02:16:50.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space ("%20"). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15234 - http://www.osvdb.org/16218
CVE ID: CVE-2005-1657 State: PUBLISHED Published: 2005-05-18T04:00:00Z Last Updated: 2024-09-17T00:45:32.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations via the Folder.Id parameter to (1) deletefolder.ctml, (2) deletemessage.ctml, (3) origmessage.ctml, or (4) readmessage.ctml, the Message.Id parameter to editmessage.ctml, or the (5) Message.Command parameter to messages.ctml. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16225 - http://www.osvdb.org/16220 - http://www.osvdb.org/16222 - http://secunia.c
r: References: - http://www.osvdb.org/16225 - http://www.osvdb.org/16220 - http://www.osvdb.org/16222 - http://secunia.com/advisories/15234 - http://www.osvdb.org/16223 - http://www.osvdb.org/16221 - http://www.osvdb.org/16224
CVE ID: CVE-2005-1658 State: PUBLISHED Published: 2005-05-18T04:00:00Z Last Updated: 2024-09-17T00:55:48.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in filemanager.cpp in MyServer 0.8 allows remote attackers to list the parent directory of the web root via a URL with a "..." (triple dot). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15274 - http://cvs.sourceforge.net/viewcvs.py/myserverweb/myserverweb/source/filemanager.cpp?rev=1.116&view=log
CVE ID: CVE-2005-1659 State: PUBLISHED Published: 2005-05-18T04:00:00Z Last Updated: 2024-09-17T03:32:45.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in filemanager.cpp in MyServer 0.8 allows remote attackers to inject arbitrary Javascript via a URL with a "..." (triple dot) followed by an onmouseover event. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15274 - http://cvs.sourceforge.net/viewcvs.py/myserverweb/myserverweb/source/filemanager.cpp?rev=1.116&view=log
CVE ID: CVE-2005-1660 State: PUBLISHED Published: 2005-05-18T04:00:00 Last Updated: 2024-08-07T21:59:24.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTMLJunction EZGuestbook stores the guestbook.mdb file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the administrative password. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013912 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20487 - http://www.osvdb.org/16444
CVE ID: CVE-2005-1661 State: PUBLISHED Published: 2005-05-18T04:00:00Z Last Updated: 2024-09-16T17:19:01.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jeuce Personal Webserver 2.13 allows remote attackers to cause a denial of service (server crash) via a long GET request, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16453 - http://securitytracker.com/id?1013902 - http://secunia.com/advisories/13732 - http://users.pandora.be/bratax/advisories/b005.html