Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-2127 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-08T03:51:17.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integrity Protection Driver (IPD) 1.2 and earlier blocks access to \Device\PhysicalMemory by its name, which could allow local privileged processes to overwrite kernel memory by accessing the device through a symlink. Additional Analyst Notes: - CVE Program Container: References: - http://www.phrack.org/show.php?p=59&a=16 - http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0087.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10747
CVE ID: CVE-2002-2128 State: PUBLISHED Published: 2005-11-16T07:37:00Z Last Updated: 2024-09-16T18:23:41.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: editform.php in w-Agora 4.1.5 allows local users to execute arbitrary PHP code via .. (dot dot) sequences in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10919.php - http://www.securityfocus.com/bid/6463 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0225.html - http://archives.neohapsis.com/archives/bugtraq/2002-12/0222.html
CVE ID: CVE-2002-2129 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-08T03:51:17.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability (XSS) in editform.php for w-Agora 4.1.5 allows remote attackers to execute arbitrary web script via an arbitrary form field name containing the script, which is echoed back to the user when displaying the form. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-12/0225.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10920 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0222.html - http://www.securityfocus.c
om/vulnerabilities/10920 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0222.html - http://www.securityfocus.com/bid/6464
CVE ID: CVE-2002-2130 State: PUBLISHED Published: 2005-11-16T07:37:00Z Last Updated: 2024-09-16T20:06:57.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: publish_xp_docs.php in Gallery 1.3.2 allows remote attackers to execute arbitrary PHP code by modifying the GALLERY_BASEDIR parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6489 - http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=64&mode=thread&order=0&thold=0 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0260.html - http://www.iss.net/security_center/static/10943.p
0 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0260.html - http://www.iss.net/security_center/static/10943.php
CVE ID: CVE-2002-2131 State: PUBLISHED Published: 2005-11-16T07:37:00Z Last Updated: 2024-09-16T18:56:15.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Perl-HTTPd before 1.0.2 allows remote attackers to view arbitrary files via a .. (dot dot) in an unknown argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6497 - http://www.iss.net/security_center/static/10992.php - http://citrustech.net/~chrisj/perl-httpd/INFO.txt
CVE ID: CVE-2002-2132 State: PUBLISHED Published: 2005-11-16T07:37:00Z Last Updated: 2024-09-16T23:16:14.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6483 - http://www.iss.net/security_center/static/10957.php - http://archives.neohapsis.com/archives/bugtraq/2002-12/0250.html
CVE ID: CVE-2002-2133 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-08T03:51:17.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telindus 1100 ASDL router running firmware 6.0.x uses weak encryption for UDP session traffic, which allows remote attackers to gain unauthorized access by sniffing and decrypting the administrative password. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10951.php - http://archives.neohapsis.com/archives/bugtraq/2003-02/0277.html - http://www.osvdb.org/4762 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0262.html - http://www.securityfocus.com/bid/6919
CVE ID: CVE-2002-2134 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-08T03:51:17.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: haut.php in PEEL 1.0b allows remote attackers to execute arbitrary PHP code by modifying the dirroot parameter to reference a URL on a remote web server that contains the code in a lang.php file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/304779 - http://www.securitytracker.com/id?1005869 - http://www.securityfocus.com/bid/6496 - http://www.iss.net/security_center/static/10960.php - http://secunia.com/advisories/7797
CVE ID: CVE-2002-2135 State: REJECTED Published: 2005-11-16T21:17:00 Last Updated: 2007-10-18T09:00:00 Description: No description available.
CVE ID: CVE-2002-2136 State: REJECTED Published: 2005-11-16T21:17:00 Last Updated: 2007-10-18T09:00:00 Description: No description available.
CVE ID: CVE-2002-2137 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-17T01:10:53.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: GlobalSunTech Wireless Access Points (1) WISECOM GL2422AP-0T, and possibly OEM products such as (2) D-Link DWL-900AP+ B1 2.1 and 2.2, (3) ALLOY GL-2422AP-S, (4) EUSSO GL2422-AP, and (5) LINKSYS WAP11-V2.2, allow remote attackers to obtain sensitive information like WEP keys, the administrator password, and the MAC filter via a "getsearch" request to UDP port 27155. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6100 - http://www.iss.net/security_center/static/10536.php - http
tainer: References: - http://www.securityfocus.com/bid/6100 - http://www.iss.net/security_center/static/10536.php - http://online.securityfocus.com/archive/1/298432
CVE ID: CVE-2002-2138 State: PUBLISHED Published: 2005-11-16T21:17:00 Last Updated: 2024-08-08T03:51:17.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: RFC-NETBIOS in HP Advanced Server/9000 B.04.05 through B.04.09, when running HP-UX 11.00 or 11.11, allows remote attackers to cause a denial of service (panic) via a malformed UDP packet on port 139. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/advisories/4268 - http://www.securityfocus.com/bid/5195 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5654 - http://www.iss.net/security_center/static/9536.php
CVE ID: CVE-2002-2139 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-17T03:27:45.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs for a user's VPN session, which allows local users to hijack a session via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/pix-multiple-vuln-pub.shtml - http://www.ciac.org/ciac/bulletins/n-017.shtml - http://www.securityfocus.com/bid/6211 - http://www.iss.net/security_center/static/10660.php
CVE ID: CVE-2002-2140 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-17T04:25:01.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Cisco PIX Firewall 5.2.x to 5.2.8, 6.0.x to 6.0.3, 6.1.x to 6.1.3, and 6.2.x to 6.2.1 allows remote attackers to cause a denial of service via HTTP traffic authentication using (1) TACACS+ or (2) RADIUS. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/pix-multiple-vuln-pub.shtml - http://www.securityfocus.com/bid/6212 - http://www.ciac.org/ciac/bulletins/n-017.shtml - http://www.iss.net/security_center/static/10661.php
CVE ID: CVE-2002-2141 State: PUBLISHED Published: 2005-11-16T21:17:00 Last Updated: 2024-08-08T03:51:17.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and Express 7.0 and 7.0.0.1, when running Servlets and Enterprise JavaBeans (EJB) on more than one server, will remove the security constraints and roles on all servers for any Servlets or EJB that are used by an application that is undeployed on one server, which could allow remote attackers to conduct unauthorized activities in violation of the intended restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10291.php - http://www.securityfo
otes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10291.php - http://www.securityfocus.com/bid/5846 - http://dev2dev.bea.com/pub/advisory/39
CVE ID: CVE-2002-2142 State: PUBLISHED Published: 2005-11-16T21:17:00 Last Updated: 2024-08-08T03:51:17.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: An undocumented extension for the Servlet mappings in the Servlet 2.3 specification, when upgrading to WebLogic Server and Express 7.0 Service Pack 1 from BEA WebLogic Server and Express 6.0 through 7.0.0.1, does not prepend a "/" character in certain URL patterns, which prevents the proper enforcement of role mappings and policies in applications that use the extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10392.php - http://www.securityfocus.com/bid/5971 -
m Container: References: - http://www.iss.net/security_center/static/10392.php - http://www.securityfocus.com/bid/5971 - http://dev2dev.bea.com/pub/advisory/3
CVE ID: CVE-2002-2143 State: PUBLISHED Published: 2005-11-16T21:17:00 Last Updated: 2024-08-08T03:51:17.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin.html file in MySimple News 1.0 stores its administrative password in plaintext, which allows remote attackers to gain unauthorized access to the web server by viewing the source of admin.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5866 - http://www.iss.net/security_center/static/10298.php - http://www.securityfocus.com/archive/1/293871
CVE ID: CVE-2002-2144 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-16T16:22:37.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in BearShare 4.0.5 and 4.0.6 allows remote attackers to read files outside of the web root by hex-encoding the "/" (forward slash) or "." (dot) characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5888 - http://www.iss.net/security_center/static/10240.php - http://online.securityfocus.com/archive/1/294078
CVE ID: CVE-2002-2145 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-17T02:27:51.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10104.php - http://www.securityfocus.com/bid/5709 - http://online.securityfocus.com/archive/1/291791
CVE ID: CVE-2002-2146 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-16T22:30:38.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgitest.exe in Savant Web Server 3.1 and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-09/0151.html - http://www.securityfocus.com/bid/5706 - http://www.iss.net/security_center/static/10102.php
CVE ID: CVE-2002-2147 State: REJECTED Published: 2005-11-16T21:17:00 Last Updated: 2007-10-18T09:00:00 Description: No description available.
CVE ID: CVE-2002-2148 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-16T22:52:13.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as hostname, MAC, and IP address of the Ethernet interface via a discard (UDP port 9) packet, which causes the device to leak the information in the response. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9704.php - http://www.securityfocus.com/bid/5335 - http://online.securityfocus.com/archiv
iss.net/security_center/static/9704.php - http://www.securityfocus.com/bid/5335 - http://online.securityfocus.com/archive/1/284650
CVE ID: CVE-2002-2149 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-16T22:25:13.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers allows remote attackers to cause a denial of service (reboot) via a long HTTP request to the administrative interface. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/284649 - http://www.securityfocus.com/bid/5333 - http://www.iss.net/security_center/static/9705.php
CVE ID: CVE-2002-2150 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-16T17:23:11.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP flood, or (3) Crikey CRC Flood, which causes the firewall to refuse any new connections. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6023 - http://www.kb.cert.org/vuls/id/539363 - http://www.iss.net/security_center/static/10449.php
CVE ID: CVE-2002-2151 State: REJECTED Published: 2005-11-16T21:17:00 Last Updated: 2007-10-18T09:00:00 Description: No description available.
CVE ID: CVE-2002-2152 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-17T00:30:29.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to gain administrator privileges via direct HTTP requests to the /admin/ directory, which is not password protected. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/296119 - http://www.securityfocus.com/bid/6006 - http://www.iss.net/security_center/static/10408.php
CVE ID: CVE-2002-2153 State: PUBLISHED Published: 2005-11-16T21:17:00 Last Updated: 2024-08-08T03:51:17.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the administrative pages of the PL/SQL module for Oracle Application Server 4.0.8 and 4.0.8 2 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.nextgenss.com/vna/ora-ias.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/10183 - http://www.securityfocus.com/bid/4844 - http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf - http://www.kb.cert.org/vuls/id/467555
CVE ID: CVE-2002-2154 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-16T16:47:49.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Monkey HTTP Daemon 0.1.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5792 - http://www.iss.net/security_center/static/10188.php - http://archives.neohapsis.com/archives/bugtraq/2002-09/0298.html
CVE ID: CVE-2002-2155 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-16T20:01:52.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string specifiers in the name. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9761.php - http://www.securityfocus.com/archive/1/285695 - http://www.securityfocus.com/bid/5388
CVE ID: CVE-2002-2156 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-16T23:50:56.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Trillian 0.73 allows remote IRC servers to execute arbitrary code via a long PING response. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/285695 - http://www.securityfocus.com/archive/1/285639
CVE ID: CVE-2002-2157 State: REJECTED Published: 2005-11-16T21:17:00 Last Updated: 2007-10-18T09:00:00 Description: No description available.
CVE ID: CVE-2002-2158 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-16T23:46:43.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: zenTrack 2.0.3 and earlier allows remote attackers to obtain the full path to the web root via an invalid ticket ID, which leaks the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4973 - http://www.iss.net/security_center/static/9312.php - http://online.securityfocus.com/archive/1/276121
CVE ID: CVE-2002-2159 State: PUBLISHED Published: 2005-11-16T21:17:00 Last Updated: 2024-08-08T03:51:17.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with the firmware 1.42.7 upgrade installed opens TCP port 5678 for remote administration even when the "Block WAN" and "Remote Admin" options are disabled, which allows remote attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9330.php - http://www.securityfocus.com/bid/4987 - http://www.securiteam.com/securitynews/5OP022K7GE.html
CVE ID: CVE-2002-2160 State: REJECTED Published: 2005-11-16T21:17:00 Last Updated: 2007-10-18T09:00:00 Description: No description available.
CVE ID: CVE-2002-2161 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-17T00:30:47.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to cause a denial of service (hang and CPU consumption) via a SYN packet flood. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5570 - http://online.securityfocus.com/archive/1/289119 - http://www.iss.net/security_center/static/9963.php
CVE ID: CVE-2002-2162 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-17T01:06:14.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/291071 - http://www.iss.net/security_center/static/10092.php - http://www.securityfocus.com/bid/5677
CVE ID: CVE-2002-2163 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-17T01:51:44.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: KvPoll 1.1 allows remote authenticated users to vote more than once by setting the "already_voted" cookie by various methods, including a direct call to clear_cookies.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.ifrance.com/kitetoua/tuto/5holes5.txt - http://www.securityfocus.com/bid/4736
CVE ID: CVE-2002-2164 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-16T16:38:25.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (crash) via a long <A HREF> link. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/291058 - http://www.securityfocus.com/bid/5682 - http://www.iss.net/security_center/static/10067.php - http://archives.neohapsis.com/archives/bugtraq/2002-09/0082.html
CVE ID: CVE-2002-2165 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-16T23:40:38.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMHO Webmail module 0.97.3 and earlier for Roxen leaks the REFERER from the browser's previous login session in an error page, which allows local users to read another user's inbox. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitybugware.org/Other/5537.html - http://www.iss.net/security_center/static/9615.php - http://www.securityfocus.com/bid/5238
CVE ID: CVE-2002-2166 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-16T17:53:44.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in FuseTalk 2.0 and 3.0 allows remote attackers to insert arbitrary HTML and web script. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9637.php - http://www.securityfocus.com/bid/5236
CVE ID: CVE-2002-2167 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-16T19:40:11.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in function_foot_1.inc.php for Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to read arbitrary files via .. (dot dot) sequences terminated by a null character in the $designNo variable, which is part of an "include" function call. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9581.php - http://www.securityfocus.com/bid/5243 - http://online.securityfocus.com/archive/1/282404
CVE ID: CVE-2002-2168 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-16T16:43:41.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to execute arbitrary SQL queries via various programs including function_describe_item1.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9582.php - http://www.123tkshop.org/index.php - http://www.securityfocus.com/bid/5244 - http://online.securityfocus.com/archive/1/282404
CVE ID: CVE-2002-2169 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-16T17:53:57.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV="refresh" tag to an aim: URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9616.php - http://www.mindflip.org/aim.html - http://online.securityfocus.com/archive/1/282443 - http://www.securityfocus.com/bid/5246