Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-1932 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x through 7.2 allows remote attackers to execute arbitrary SQL code and create an administrator account via base64-encoded SQL in the admin parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15835 - http://marc.info/?l=bugtraq&m=108180334918576&w=2 - http://www.waraxe.us/index.php?modname=sa&id=18
CVE ID: CVE-2004-1933 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citadel/UX 5.00 through 6.14 installs the database directory and files with world-read permissions, which could allow local users to bypass access controls and read unauthorized messages. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108180024428804&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15850 - http://www.securityfocus.com/bid/10102
CVE ID: CVE-2004-1934 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in affich.php in Gemitel 3.50 allows remote attackers to execute arbitrary PHP code via the base parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5396 - http://secunia.com/advisories/11393 - http://www.securityfocus.com/bid/10156 - http://marc.info/?l=bugtraq&m=108206642725505&w=2 - http://securitytracker.com/id?1009824 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15887
CVE ID: CVE-2004-1935 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via onload, onmouseover, and other Javascript events in an e-mail attachment. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11396 - http://marc.info/?l=bugtraq&m=108207280917231&w=2 - http://www.securityfocus.com/bid/10154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15878
CVE ID: CVE-2004-1936 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZoneAlarm Pro 4.5.538.001 and possibly other versions allows remote attackers to bypass e-mail protection via attachments whose names contain certain non-English characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10148 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15884 - http://marc.info/?l=bugtraq&m=108248415509417&w=2 - http://marc.info/?l=bugtraq&m=108206751931251&w=2
CVE ID: CVE-2004-1937 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Nuked-KlaN 1.4b and 1.5b allow remote attackers to read or include arbitrary files via .. sequences in (1) the user_langue parameter to index.php or (2) the langue parameter to update.php, or modify arbitrary GLOBAL variables by causing globals.php to be loaded before conf.inc.php via (3) .. sequences in the file parameter with the page parameter set to globals, or (4) ../globals.php in the user_langue parameter, as demonstrated by modifying $nuked[prefix] in the Suggest module.
or (4) ../globals.php in the user_langue parameter, as demonstrated by modifying $nuked[prefix] in the Suggest module. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108222826225823&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15843 - http://www.phpsecure.info/v2/tutos/frog/Nuked-KlaN.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/15844 - http://secunia.com/advisories/11341 - http://www.securityfocus.com/bid/10104
CVE ID: CVE-2004-1938 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands via doubly hex-encoded characters such as "%2527", which is translated to "'", as demonstrated using the phorum_uriauth parameter to list.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15894 - http://secunia.com/advisories/11407 - http://marc.info/?l=bugtraq&m=108239796512897&w=2 - http://www.waraxe.us/index.php?modname=sa&id=19 - http
ories/11407 - http://marc.info/?l=bugtraq&m=108239796512897&w=2 - http://www.waraxe.us/index.php?modname=sa&id=19 - http://www.securityfocus.com/bid/10173
CVE ID: CVE-2004-1939 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or HTML via double encoded slashes (%252F) in the key parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/windowsntfocus/5EP0I15CKK.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15858 - http://secunia.com/advisories/11388 - http://marc.info/?l=bugtraq&m=108241507812681&w=2 - http://www.securityfocus.com/bid/10139
CVE ID: CVE-2004-1940 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: sipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a STUN response packet with a large attrLen value that causes an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108244325924859&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15874 - http://www.wirlab.net/kphone/changes-4.0.2.html - http://www.securiteam.com/unixfocus/5PP0B1FCLY.html - http://www.securityfocus.com/bid/10159
CVE ID: CVE-2004-1941 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fastream NETFile FTP/Web Server 6.5.1.980 allows remote attackers to cause a denial of service via a username that does not exist. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5548 - http://www.securityfocus.com/bid/10169 - http://www.autistici.org/fdonato/advisory/FastreamNETFileFWServer6.5.1.980-adv.txt - http://securitytracker.com/id?1009868 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15899 - http://secunia.com/advisories/11428 - http://marc.info/?l=bugtraq&m=1082392496138
e.ibmcloud.com/vulnerabilities/15899 - http://secunia.com/advisories/11428 - http://marc.info/?l=bugtraq&m=108239249613861&w=2
CVE ID: CVE-2004-1942 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108241638500417&w=2 - http://www.ciac.org/ciac/bulletins/o-144.shtml - http://www.securityfocus.com/bid/10261 - http://sunsolve.sun.com/search/document.do
iac.org/ciac/bulletins/o-144.shtml - http://www.securityfocus.com/bid/10261 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57554-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15908
CVE ID: CVE-2004-1943 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15916 - http://www.securityfocus.com/bid/10177 - http://marc.info/?l=bugtraq&m=108244738102532&w=2
CVE ID: CVE-2004-1944 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eudora 6.1 and 6.0.3 for Windows allows remote attackers to cause a denial of service (crash) via a deeply nested multipart MIME message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15857 - http://secunia.com/advisories/11360 - http://marc.info/?l=bugtraq&m=108241694627321&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020075.html
CVE ID: CVE-2004-1945 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via a long MAIL FROM field. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5593 - http://marc.info/?l=bugtraq&m=108568462428096&w=2 - http://www.securityfocus.com/bid/10180 - http://marc.info/?l=bugtraq&m=108247921402458&w=2 - http://securitytracker.com/id?1009882 - http://secunia.com/advisories/11449 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15922
CVE ID: CVE-2004-1946 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the PRINT_ERROR function in common.c for Cherokee Web Server 0.4.16 and earlier allows local users to execute arbitrary code via format string specifiers in the -C command line argument. NOTE: it is not clear whether this issue could be exploited remotely, or if Cherokee is running at escalated privileges. Therefore it might not be a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108249818308672&w=2 - https://exchange.xforce.ibmcloud.
E Program Container: References: - http://marc.info/?l=bugtraq&m=108249818308672&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15924 - http://www.nosystem.com.ar/advisories/advisory-03.txt
CVE ID: CVE-2004-1947 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestFile method to download and execute arbitrary code via an object codebase that uses bitdefender.cab. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15911 - http://www.securityfocus.com/bid/10174 - http://marc.info/?l=bugtraq&m=108248367901616&w=2 - http://secunia
ties/15911 - http://www.securityfocus.com/bid/10174 - http://marc.info/?l=bugtraq&m=108248367901616&w=2 - http://secunia.com/advisories/11427 - http://www.securityfocus.com/bid/10175 - http://securitytracker.com/id?1009862 - http://www.osvdb.org/5549 - http://marc.info/?l=bugtraq&m=108240639427412&w=2
CVE ID: CVE-2004-1948 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: NcFTP client 3.1.6 and 3.1.7, when the username and password are included in an FTP URL that is provided on the command line, allows local users to obtain sensitive information via "ps aux," which displays the URL in the process list. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10182 - http://secunia.com/advisories/11438 - http://marc.info/?l=bugtraq&m=108247943201685&w=2 - http://www.osvdb.org/5595 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15919
CVE ID: CVE-2004-1949 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PostNuke 7.2.6 and earlier allows remote attackers to execute arbitrary SQL via (1) the sif parameter to index.php in the Comments module or (2) timezoneoffset parameter to changeinfo.php in the Your_Account module. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5369 - http://www.securityfocus.com/bid/10146 - http://news.postnuke.com/Article2580.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15869 - http://marc.info/?l=bugtraq&m=108256503718978&
e2580.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15869 - http://marc.info/?l=bugtraq&m=108256503718978&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020154.html - http://www.osvdb.org/5368 - http://securitytracker.com/id?1009801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15875 - http://secunia.com/advisories/11386
CVE ID: CVE-2004-1950 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11434 - http://marc.info/?l=bugtraq&m=108239864203144&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15909 - http://www.securityfocus.com/bid/10170 - http://marc.info/?l=bugtraq&m=108241122908409&w=2
CVE ID: CVE-2004-1951 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite arbitrary files via the (1) audio.sun_audio_device or (2) dxr3.devicename options in an MRL link. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11433 - http://www.xinehq.de/index.php/security/XSA-2004-1 - http://www.securityfocus.com/bid/10193 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15939 - http://www.slackware.com/security/viewer.php?l=slackware-
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15939 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.372791 - http://www.xinehq.de/index.php/security/XSA-2004-2 - http://security.gentoo.org/glsa/glsa-200404-20.xml - http://www.osvdb.org/5739 - http://www.osvdb.org/5594
CVE ID: CVE-2004-1952 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108258046402890&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15892 - http://www.securityfocus.com/bid/10209 - http://archives.neohapsis.com/archives/bugtraq/2005-02/0138.html
CVE ID: CVE-2004-1953 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which reveals the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5623 - http://marc.info/?l=bugtraq&m=108258931430060&w=2 - http://www.waraxe.us/index.php?modname=sa&id=21 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15930 - http://secunia.com/advisories/11465 - http://www.securityfocus.com/bid/10190
CVE ID: CVE-2004-1954 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote attackers to inject arbitrary web script or HTML via the jcode parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108258931430060&w=2 - http://www.osvdb.org/5624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15931 - http://www.waraxe.us/index.php?modname=sa&id=21 - http://secunia.com/advisories/11465 - http://www.securityfocus.com/bid/10190
CVE ID: CVE-2004-1955 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute arbitrary SQL code via the offset parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5625 - http://marc.info/?l=bugtraq&m=108258931430060&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15932 - http://www.waraxe.us/index.php?modname=sa&id=21 - http://secunia.com/advisories/11465 - http://www.securityfocus.com/bid/10190
CVE ID: CVE-2004-1956 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostNuke 0.7.2.6 allows remote attackers to gain information via a direct HTTP request to files in the (1) includes/blocks directory, (2) pnadodb directory, (3) NS-NewUser module, (4) NS-Your_Account, (5) NS-LostPassword module, or (6) NS-User module which reveals the path to the web server in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10191 - http://www.waraxe.us/index.php?modname=sa&id=22 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15933 -
d/10191 - http://www.waraxe.us/index.php?modname=sa&id=22 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15933 - http://marc.info/?l=bugtraq&m=108258902000472&w=2
CVE ID: CVE-2004-1957 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.726 allows remote attackers to inject arbitrary web script or HTML via the (1) lid and query parameters to the Downloads module, (2) query parameter to the Web_links module, or (3) hlpfile parameter to openwindow.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10191 - http://www.waraxe.us/index.php?modname=sa&id=22 - http://marc.info/?l=bugtraq&m=108258902000472&w=2 - https://exchange.xforce.ibmcloud.com/vul
ndex.php?modname=sa&id=22 - http://marc.info/?l=bugtraq&m=108258902000472&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15934
CVE ID: CVE-2004-1958 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files via .. (dot dot) sequences in a UMOD (Unreal MOD) file. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/umod-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/15942 - http://marc.info/?l=bugtraq&m=108267310519459&w=2 - http://www.securityfocus.com/bid/10196
CVE ID: CVE-2004-1959 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: blocker_query.php in Protector System 1.15b1 for PHP-Nuke allows remote attackers to gain sensitive information via a string in the portNum parameter, which reveals the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15963 - http://marc.info/?l=bugtraq&m=108276299810121&w=2 - http://www.waraxe.us/index.php?modname=sa&id=25 - http://protector.warcenter.se/article-53--0-0.html
CVE ID: CVE-2004-1960 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in blocker_query.php in Protector System 1.15b1 allows remote attackers to inject arbitrary web script or HTML via the (1) target or (2) portNum parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/361300/2004-04-21/2004-04-27/0 - http://www.securityfocus.com/bid/10206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15965 - http://www.waraxe.us/index.php?modname=sa&id=25 - http://protector.warcenter.se/article-53--0-0
/vulnerabilities/15965 - http://www.waraxe.us/index.php?modname=sa&id=25 - http://protector.warcenter.se/article-53--0-0.html
CVE ID: CVE-2004-1961 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: blocker.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection protection and execute limited SQL commands via URL-encoded "'" characters ("%27"). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/361300/2004-04-21/2004-04-27/0 - http://www.securityfocus.com/bid/10206 - http://www.waraxe.us/index.php?modname=sa&id=25 - http://protector.warcenter.se/article-53--0-0.html
CVE ID: CVE-2004-1962 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection filters by using "/**/" sequences in the targeted fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/361300/2004-04-21/2004-04-27/0 - http://www.securityfocus.com/bid/10206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15969 - http://www.waraxe.us/index.php?modname=sa&id=25 - http://protector.warcenter.se/article-53--0-0.html
CVE ID: CVE-2004-1963 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: nqt.php in Network Query Tool (NQT) 1.6 allows remote attackers to obtain sensitive information via a string in the portNum parameter, which reveals the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15957 - http://www.waraxe.us/index.php?modname=sa&id=24 - http://marc.info/?l=bugtraq&m=108276405108267&w=2 - http://secunia.com/advisories/11479
CVE ID: CVE-2004-1964 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in nqt.php in Network Query Tool (NQT) 1.6 allows remote attackers to inject arbitrary web script or HTML via the portNum parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/index.php?modname=sa&id=24 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15929 - http://marc.info/?l=bugtraq&m=108276405108267&w=2 - http://www.securityfocus.com/bid/10205 - http://secunia.com/advisories/11479