Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-4448 State: PUBLISHED Published: 2005-12-21T11:00:00 Last Updated: 2024-08-07T23:46:05.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and the hashed password rather than the plaintext password, which allows attackers to gain privileges by obtaining the password hash (possibly via CVE-2005-2813), then calculating the credentials and including them in the secid cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22159 - http://cvs.sourceforge.net/viewcvs.py/flatnuke/flatnuke/Changelog?rev=1.78&v
xforce.ibmcloud.com/vulnerabilities/22159 - http://cvs.sourceforge.net/viewcvs.py/flatnuke/flatnuke/Changelog?rev=1.78&view=markup - http://www.securityfocus.com/bid/15796 - http://www.securityfocus.com/archive/1/419107 - http://securitytracker.com/id?1015339
CVE ID: CVE-2005-4449 State: PUBLISHED Published: 2005-12-21T11:00:00 Last Updated: 2024-08-07T23:46:05.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the file parameter to an arbitrary file and injecting the code into the body parameter. NOTE: if a FlatNuke administrator is normally assumed to be able to modify arbitrary content, then this issue does not cross privilege boundaries and would not be a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22159 - http://cvs.sourceforge.ne
Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22159 - http://cvs.sourceforge.net/viewcvs.py/flatnuke/flatnuke/Changelog?rev=1.78&view=markup - http://www.securityfocus.com/archive/1/419107 - http://securitytracker.com/id?1015339 - http://securityreason.com/securityalert/248
CVE ID: CVE-2005-4450 State: PUBLISHED Published: 2005-12-21T11:00:00Z Last Updated: 2024-09-16T20:07:38.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.7.0 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag to server_privileges.php, as demonstrated using the dbname and checkprivs parameters. NOTE: the provenance of this issue is unknown, although third parties imply that it is related to the disclosure of CVE-2005-4349, which was labeled as SQL injection but disputed. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/1811
ection but disputed. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18113
CVE ID: CVE-2005-4451 State: PUBLISHED Published: 2005-12-21T11:00:00 Last Updated: 2024-08-07T23:46:05.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Software Distributor in HP-UX B.11.11 allows remote attackers to gain access via unspecified attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18180 - http://www.securityfocus.com/archive/1/419897/100/0/threaded - http://www.securityfocus.com/bid/15979 - http://www.securityfocus.com/archive/1/419897/100/0/threaded - http://www.vupen.com/english/advisories/2005/3009 - http://support.avaya.com/elmodocs2/security/ASA-2006-005.htm - http://se
://www.vupen.com/english/advisories/2005/3009 - http://support.avaya.com/elmodocs2/security/ASA-2006-005.htm - http://secunia.com/advisories/18418 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5638 - http://securitytracker.com/id?1015381
CVE ID: CVE-2005-4452 State: PUBLISHED Published: 2005-12-21T11:00:00 Last Updated: 2024-08-07T23:46:05.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information Call Center stores the CallCenterData.mdb database under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18159 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23862
CVE ID: CVE-2005-4453 State: PUBLISHED Published: 2005-12-21T11:00:00 Last Updated: 2024-08-07T23:46:05.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges by modifying the original (1) p_User_user_id and (2) User_user_id parameters to UserProfile.aspx, then modifying the password field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/419910/100/0/threaded - http://www.vupen.com/english/advisories/2005/3031 - http://www.securityfocus.com/bid/15976 - http://www.irmplc.com/advisory013.htm - http://secunia.com
visories/2005/3031 - http://www.securityfocus.com/bid/15976 - http://www.irmplc.com/advisory013.htm - http://secunia.com/advisories/18174
CVE ID: CVE-2005-4454 State: PUBLISHED Published: 2005-12-21T11:00:00 Last Updated: 2024-08-07T23:46:05.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Validate-before-filter vulnerability in cleanhtml.pl 1.129 in LiveJournal CVS before Dec 7 2005, when the cleancss option is enabled, allows remote attackers to conduct cross-site scripting (XSS) attacks via a "\" (backslash) within a "javascript" scheme in a style property (such as "javas\cript"), which bypasses the "javascript" check before the "\" is stripped and then rendered in web browsers that allow scripting in style sheets. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/
ripting in style sheets. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18157 - http://www.osvdb.org/21896 - http://marc.info/?l=full-disclosure&m=113504421421972&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23839 - http://cvs.livejournal.org/browse.cgi/livejournal/cgi-bin/cleanhtml.pl - http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1000.html - http://www.securityfocus.com/bid/15990
CVE ID: CVE-2005-4455 State: PUBLISHED Published: 2005-12-21T11:00:00Z Last Updated: 2024-09-16T23:00:40.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: cleanhtml.pl 1.129 in LiveJournal CVS before Dec 13 2005 allows remote attackers to inject scripting languages via the XSL namespace in XML, via vectors such as customview.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18157 - http://cvs.livejournal.org/browse.cgi/livejournal/cgi-bin/cleanhtml.pl
CVE ID: CVE-2005-4456 State: PUBLISHED Published: 2005-12-21T11:00:00 Last Updated: 2024-08-07T23:46:05.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) LIST, (2) LSUB, and (3) UID FETCH commands. NOTE: it is possible that these are alternate vectors for the issue described in CVE-2005-4402. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18134 - http://www.securityfocus.com/bid/15985 - http://seclists.org/lists/fulldisclosure
http://secunia.com/advisories/18134 - http://www.securityfocus.com/bid/15985 - http://seclists.org/lists/fulldisclosure/2005/Dec/1036.html
CVE ID: CVE-2005-4457 State: PUBLISHED Published: 2005-12-21T11:00:00 Last Updated: 2024-08-07T23:46:05.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: MailEnable Enterprise 1.1 before patch ME-10009 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via several "..." (triple dot) sequences in a UID FETCH command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18134 - http://seclists.org/lists/fulldisclosure/2005/Dec/1036.html
CVE ID: CVE-2005-4458 State: PUBLISHED Published: 2005-12-21T11:00:00 Last Updated: 2024-08-07T23:46:05.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Group.pm in Metadot Portal Server 6.4.4 and earlier does not properly reset the $IS_OWNER, $IS_ADMIN, and $IS_MANAGER global variables when performing checks for special privileges, which allows users to gain administrator privileges by adding themselves to the SITE_MGR group. Additional Analyst Notes: - CVE Program Container: References: - http://www.metadot.com/metadot/index.pl?iid=2632 - http://www.vupen.com/english/advisories/2005/3030 - http://securityreason.com/securityalert/287 - http://secunia.com/advisories/18137 - ht
om/english/advisories/2005/3030 - http://securityreason.com/securityalert/287 - http://secunia.com/advisories/18137 - http://www.securityfocus.com/archive/1/420002/100/0/threaded - http://www.securityfocus.com/bid/15975 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23847 - http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1012.html - http://www.osvdb.org/22014
CVE ID: CVE-2005-4459 State: PUBLISHED Published: 2005-12-21T20:00:00 Last Updated: 2024-08-07T23:46:05.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18344 - http://securityreason.com/securityalert/282 - http://www.vupen.com/english/advisories/2005/3013 - http://secunia.com/advisories/18162 - http://w
m/securityalert/282 - http://www.vupen.com/english/advisories/2005/3013 - http://secunia.com/advisories/18162 - http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2000 - http://www.gentoo.org/security/en/glsa/glsa-200601-04.xml - http://www.securityfocus.com/bid/15998 - http://securitytracker.com/id?1015401 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.html - http://www.kb.cert.org/vuls/id/856689 - http://www.securityfocus.com/archive/1/419997/100/0/threaded - http://www.securityfocus.com/archive/1/420017/100/0/threaded - http://securityreason.com/securityalert/289
CVE ID: CVE-2005-4460 State: PUBLISHED Published: 2005-12-21T20:00:00 Last Updated: 2024-08-07T23:46:05.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Beehive Forum 0.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Description, and (3) Comment fields to (a) links.php and (b) links_add.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23879 - http://www.securityfocus.com/archive/1/419988/100/0/threaded - http://www.vupen.com/english/advisories/2005/3043 - http://www.secur
securityfocus.com/archive/1/419988/100/0/threaded - http://www.vupen.com/english/advisories/2005/3043 - http://www.securityfocus.com/bid/16002 - http://cvs.sourceforge.net/viewcvs.py/beehiveforum/beehiveforum/forum/index.php?rev=1.121&view=log
CVE ID: CVE-2005-4461 State: PUBLISHED Published: 2005-12-21T20:00:00 Last Updated: 2024-08-07T23:46:05.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Beehive Forum 0.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user_sess parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16521 - http://www.securityfocus.com/archive/1/419988/100/0/threaded - http://securityreason.com/securityalert/284 - http://cvs.sourceforge.net/viewcvs.py/beehiveforum/beehiveforum/forum/index.php?rev=1.121&view=log - http://kapda.ir/advisory-158.html - http://www.osvdb.
.py/beehiveforum/beehiveforum/forum/index.php?rev=1.121&view=log - http://kapda.ir/advisory-158.html - http://www.osvdb.org/21955
CVE ID: CVE-2005-4462 State: PUBLISHED Published: 2005-12-21T22:00:00 Last Updated: 2024-08-07T23:46:05.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in usermods.php in Tolva PHP website system 0.1.0 allows remote attackers to execute arbitrary code via a URL in the ROOT parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16000 - http://www.securityfocus.com/archive/1/419992/100/0/threaded - http://securityreason.com/securityalert/288
CVE ID: CVE-2005-4463 State: PUBLISHED Published: 2005-12-21T22:00:00 Last Updated: 2024-08-07T23:46:05.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 1.5.2 allows remote attackers to obtain sensitive information via a direct request to (1) wp-includes/vars.php, (2) wp-content/plugins/hello.php, (3) wp-admin/upgrade-functions.php, (4) wp-admin/edit-form.php, (5) wp-settings.php, and (6) wp-admin/edit-form-comment.php, which leaks the path in an error message related to undefined functions or failed includes. NOTE: the wp-admin/menu-header.php vector is already covered by CVE-2005-2110. NOTE: the vars.php, edit-form.php, wp-settings.php, and edit-form-comment
hp vector is already covered by CVE-2005-2110. NOTE: the vars.php, edit-form.php, wp-settings.php, and edit-form-comment.php vectors were also reported to affect WordPress 2.0.1. Additional Analyst Notes: - CVE Program Container: References: - http://echo.or.id/adv/adv24-theday-2005.txt - http://NeoSecurityTeam.net/advisories/Advisory-17.txt - http://www.securityfocus.com/archive/1/426304/100/0/threaded - http://www.securityfocus.com/archive/1/419999/100/0/threaded - http://www.securityfocus.com/archive/1/419994/100/0/threaded - http://securityreason.com/securityalert/286
CVE ID: CVE-2005-4464 State: PUBLISHED Published: 2005-12-22T00:00:00 Last Updated: 2024-08-07T23:46:05.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ingate Firewall before 4.3.4 and SIParator before 4.3.4 allows remote attackers to cause a denial of service (kernel deadlock) by sending a SYN packet for a TCP stream, which requires an RST packet in response. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16023 - http://secunia.com/advisories/18138 - http://www.vupen.com/english/advisories/2005/3011 - http://www.ingate.com/relnote-434.php
CVE ID: CVE-2005-4465 State: PUBLISHED Published: 2005-12-22T00:00:00 Last Updated: 2024-08-07T23:46:05.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Key Exchange version 1 (IKEv1) implementation in NEC UNIVERGE IX1000, IX2000, and IX3000 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/
plies to. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/3028 - http://www.sw.nec.co.jp/ixseries/ix1k2k/Support/CERT/NISCC273756.html - http://secunia.com/advisories/18166 - http://www.securityfocus.com/bid/16027
CVE ID: CVE-2005-4466 State: PUBLISHED Published: 2005-12-22T00:00:00 Last Updated: 2024-08-07T23:46:05.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the SIPParser function in i3sipmsg.dll in Interaction SIP Proxy before 3.0.011 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a REGISTER request with a SPI version number that contains a large number of space or tab characters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18197 - http://securityreason.com/securityalert/281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23823 - http://www.securit
//securityreason.com/securityalert/281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23823 - http://www.securityfocus.com/archive/1/419989/100/0/threaded - http://www.securityfocus.com/bid/16001 - http://www.vupen.com/english/advisories/2005/3029 - http://www.hat-squad.com/en/000171.html - http://securitytracker.com/id?1015392
CVE ID: CVE-2005-4467 State: PUBLISHED Published: 2005-12-22T00:00:00 Last Updated: 2024-08-07T23:46:05.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read and include arbitrary files via a .. (dot dot) in the PGV_BASE_DIRECTORY parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15983 - http://rgod.altervista.org/phpgedview_337_xpl.html - http://www.securityfocus.com/archive/1/419906/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/23871 - http://secunia.com/advisories/18177 - http://
/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/23871 - http://secunia.com/advisories/18177 - http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/help_text_vars.php?r1=1.63&r2=1.64 - http://www.vupen.com/english/advisories/2005/3033 - http://www.osvdb.org/22009 - http://securitytracker.com/id?1015395 - https://sourceforge.net/tracker/index.php?func=detail&aid=1386434&group_id=55456&atid=477081
CVE ID: CVE-2005-4468 State: PUBLISHED Published: 2005-12-22T00:00:00 Last Updated: 2024-08-07T23:46:05.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to execute arbitrary code via a URL in the PGV_BASE_DIRECTORY parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15983 - http://rgod.altervista.org/phpgedview_337_xpl.html - http://www.securityfocus.com/archive/1/419906/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/23871 - http://secunia.com/advisories/18177 - http://cvs.sourceforge
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/23871 - http://secunia.com/advisories/18177 - http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/help_text_vars.php?r1=1.63&r2=1.64 - http://www.vupen.com/english/advisories/2005/3033 - http://www.osvdb.org/22009 - http://securitytracker.com/id?1015395 - https://sourceforge.net/tracker/index.php?func=detail&aid=1386434&group_id=55456&atid=477081
CVE ID: CVE-2005-4469 State: PUBLISHED Published: 2005-12-22T00:00:00 Last Updated: 2024-08-07T23:46:05.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple direct static code injection vulnerabilities in PHPGedView 3.3.7 and earlier allow remote attackers to execute arbitrary PHP code via (1) the username field in login.php, or the (2) user_language, (3) user_email, and (4) user_gedcomid parameters in login_register.php, which is directly inserted into authenticate.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15983 - http://rgod.altervista.org/phpgedview_337_xpl.html - http://cvs.sourceforge.net/viewcvs.py/phpgedv
focus.com/bid/15983 - http://rgod.altervista.org/phpgedview_337_xpl.html - http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/login_register.php?r1=1.71.2.36&r2=1.71.2.37 - http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/login_register.php?r1=1.71.2.35&r2=1.71.2.36 - http://www.osvdb.org/22010 - http://www.securityfocus.com/archive/1/419906/100/0/threaded - http://secunia.com/advisories/18177 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23873 - http://www.vupen.com/english/advisories/2005/3033 - http://securitytracker.com/id?1015395 - https://sourceforge.net/tracker/index.php?func=detail&aid=1386434&group_id=55456&atid=477081
CVE ID: CVE-2005-4470 State: PUBLISHED Published: 2005-12-22T00:00:00 Last Updated: 2024-08-07T23:46:05.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .blend file with a negative bhead.len value, which causes less memory to be allocated than expected, possibly due to an integer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18178 - http://www.securityfocus.com/archive/1/419907/100/0/threaded - http
References: - http://secunia.com/advisories/18178 - http://www.securityfocus.com/archive/1/419907/100/0/threaded - http://secunia.com/advisories/19754 - http://www.debian.org/security/2006/dsa-1039 - http://www.vupen.com/english/advisories/2005/3032 - http://www.overflow.pl/adv/blenderinteger.txt - http://www.gentoo.org/security/en/glsa/glsa-200601-08.xml - http://secunia.com/advisories/18176 - http://www.securityfocus.com/bid/15981 - https://usn.ubuntu.com/238-2/ - http://secunia.com/advisories/18452
CVE ID: CVE-2005-4471 State: PUBLISHED Published: 2005-12-22T00:00:00 Last Updated: 2024-08-07T23:46:05.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: POP3 service in Avaya Modular Messaging Message Storage Server (MSS) 2.0 SP 4 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16024 - http://www.vupen.com/english/advisories/2005/3026 - http://support.avaya.com/elmodocs2/security/ASA-2005-235.pdf - http://secunia.com/advisories/18204
CVE ID: CVE-2005-4472 State: PUBLISHED Published: 2005-12-22T00:00:00 Last Updated: 2024-08-07T23:46:05.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Macromedia JRun 4 web server (JWS) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long request that is not properly handled during conversion to wide characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2949 - http://www.securityfocus.com/bid/16026 - http://securityreason.com/securityalert/283 - http://secunia.com/advisories/18077 - http://www.securityfocus.com/bid/15905 - http
curityreason.com/securityalert/283 - http://secunia.com/advisories/18077 - http://www.securityfocus.com/bid/15905 - http://securitytracker.com/id?1015370 - http://www.macromedia.com/devnet/security/security_zone/mpsb05-13.html - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=360
CVE ID: CVE-2005-4473 State: PUBLISHED Published: 2005-12-22T00:00:00 Last Updated: 2024-08-07T23:46:05.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Macromedia JRun 4 web server (JWS) allows remote attackers to view web application source code via "a malformed URL." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2949 - http://secunia.com/advisories/18077 - http://www.securityfocus.com/bid/15905 - http://securitytracker.com/id?1015370 - http://www.macromedia.com/devnet/security/security_zone/mpsb05-13.html