Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
itional Analyst Notes: - CVE Program Container: References: - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.10 - http://marc.info/?l=linux-kernel&m=111630531515901&w=2 - http://www.vupen.com/english/advisories/2005/0557 - http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html - http://www.securityfocus.com/bid/13651 - http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0046.html - http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0047.html - http://secunia.com/advisories/17826 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219
CVE ID: CVE-2005-1590 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:22.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Altiris Client Service for Windows (ACLIENT.EXE) 6.0.88 allows local users to disable password protection and access the administrative interface by finding and showing the "Altiris Client Service" hidden window, disabling the password protection, disabling the "Hide client tray icon box" option, then opening the AClient tray icon and using the View Log File option, a different vulnerability than CVE-2004-2070. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15897 - http://archives.neo
-2070. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15897 - http://archives.neohapsis.com/archives/fulldisclosure/2005-04/0614.html - http://secunia.com/advisories/15159
CVE ID: CVE-2005-1591 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:24.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in NIS+ on Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (rpc.nisd disabled and NIS+ unavailable) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/0492 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57780-1
CVE ID: CVE-2005-1592 State: PUBLISHED Published: 2005-05-16T04:00:00Z Last Updated: 2024-09-16T16:19:01.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple "javascript vulerabilities in BB code" in BirdBlog before 1.3.1 allow remote attackers to inject arbitrary Javascript. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15206 - http://sourceforge.net/project/shownotes.php?release_id=324788
CVE ID: CVE-2005-1593 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:22.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16155 - http://secunia.com/advisories/15251 - http://securitytracker.com/id?1013924 - http://www.securityfocus.com/bid/13560 - http://lostmon.blogspot.com/2005/05/codethat-shoppingcart-critical.html
CVE ID: CVE-2005-1594 State: PUBLISHED Published: 2005-05-16T04:00:00Z Last Updated: 2024-09-16T20:43:37.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16156 - http://secunia.com/advisories/15251 - http://securitytracker.com/id?1013924 - http://lostmon.blogspot.com/2005/05/codethat-shoppingcart-critical.html - http://www.securityfocus.com/bid/13560
CVE ID: CVE-2005-1595 State: PUBLISHED Published: 2005-05-16T04:00:00Z Last Updated: 2024-09-16T21:02:58.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: CodeThat ShoppingCart 1.3.1 stores config.ini under the web root, which allows remote attackers to obtain sensitive information via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16157 - http://secunia.com/advisories/15251 - http://securitytracker.com/id?1013924 - http://lostmon.blogspot.com/2005/05/codethat-shoppingcart-critical.html - http://www.securityfocus.com/bid/13560
CVE ID: CVE-2005-1596 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:22.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Fusion SBX 1.2 and earlier does not properly use the extract function, which allows remote attackers to bypass authentication by setting the is_logged parameter or execute arbitrary code via the maxname2 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploits.co.in/Article1134.html - http://www.osvdb.org/16216 - http://www.vupen.com/english/advisories/2005/0508 - http://secunia.com/advisories/15257 - http://www.securiteam.com/exploits/5OP042KFPU.html - http://www.osvdb.org/1
0508 - http://secunia.com/advisories/15257 - http://www.securiteam.com/exploits/5OP042KFPU.html - http://www.osvdb.org/16217 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20531
CVE ID: CVE-2005-1597 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:22.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in (1) search.php and (2) topics.php for Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the highlite parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15265 - http://www.osvdb.org/16298 - http://www.securityfocus.com/bid/13534 - http://marc.info/?l=bugtraq&m=111539908705851&w=2 - http://securitytracker.com/id?1013907 - http://www.vupen.com/english/advisories/2005/0487
ugtraq&m=111539908705851&w=2 - http://securitytracker.com/id?1013907 - http://www.vupen.com/english/advisories/2005/0487 - http://forums.invisionpower.com/index.php?showtopic=168016 - http://www.gulftech.org/?node=research&article_id=00073-05052005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20445
CVE ID: CVE-2005-1598 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:23.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash (pass_hash) that modifies the internal $pid variable. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111712587206834&w=2 - http://secunia.com/advisories/15265 - http://www.osvdb.org/16297 - http://securitytracker.com/id?1014499 - http://marc.info/?l=bugtraq&m=111539908705851&w=2 - http://securitytracker.com/id?101
//securitytracker.com/id?1014499 - http://marc.info/?l=bugtraq&m=111539908705851&w=2 - http://securitytracker.com/id?1013907 - http://www.securityfocus.com/bid/13529 - https://www.exploit-db.com/exploits/1013 - http://forums.invisionpower.com/index.php?showtopic=168016 - http://www.securiteam.com/exploits/5GP0E2KFQQ.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/20446 - http://www.gulftech.org/?node=research&article_id=00073-05052005
CVE ID: CVE-2005-1599 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:23.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Kryloff Technologies Subject Search Server (SSServer) 1.1 allows remote attackers to inject arbitrary web script or HTML via the "Search For" field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15288 - http://securitytracker.com/id?1013938 - http://www.securityfocus.com/bid/13574 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20558
CVE ID: CVE-2005-1600 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:23.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: A "mathematical flaw" in the implementation of the El Gamal signature algorithm for LibTomCrypt 1.0 to 1.0.2 allows attackers to generate valid signatures without having the private key. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20455 - http://www.securiteam.com/unixfocus/5JP092AFPG.html - http://www.osvdb.org/16188 - http://www.securityfocus.com/bid/13473 - http://secunia.com/advisories/15233 - http://www.securityfocus.org/archive/1/397649
CVE ID: CVE-2005-1601 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:23.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: MRO Maximo Self Service 4 and 5 stores certain information under the web document root using file extensions that are not processed by Tomcat, which allows remote attackers to obtain sensitive information via a direct request for the file, such as MXServer.properties. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15176 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20452 - http://www.securityfocus.com/bid/13508 - http://www.securityfocus.com/archive/1/397522 - http://www
nerabilities/20452 - http://www.securityfocus.com/bid/13508 - http://www.securityfocus.com/archive/1/397522 - http://www.osvdb.org/16161
CVE ID: CVE-2005-1602 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:23.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp for Net56 Browser Based File Manager 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20504 - http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0134.html - http://www.osvdb.org/16544
CVE ID: CVE-2005-1603 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:23.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: NiteEnterprises Remote File Manager 1.0 allows remote attackers to cause a denial of service (crash) via a crafted string to TCP port 7080. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0129.html - http://www.securityfocus.com/bid/13550 - http://www.vupen.com/english/advisories/2005/0501 - http://secunia.com/advisories/15299 - http://www.osvdb.org/16158
CVE ID: CVE-2005-1604 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:23.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via filenames containing multiple file extensions, as demonstrated using a filename ending in "php.ns", which allows execution of arbitrary PHP code. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/lists/bugtraq/2005/May/0075.html - http://www.securityfocus.com/archive/1/415172 - http://secunia.com/advisories/15279 - http://www.osvdb.org/16160 - http://www.securityfocus.com/bid/13542 - http://www.s
http://secunia.com/advisories/15279 - http://www.osvdb.org/16160 - http://www.securityfocus.com/bid/13542 - http://www.securityfocus.com/archive/1/415300/30/0/threaded
CVE ID: CVE-2005-1605 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:23.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML via the name field to (1) psoft.guestbook.GuestBookServ in Standalone Site Studio or (2) E-Guest_sign.pl in Integrated Site Studio with H-Sphere. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15286 - http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-05/0154.html - http://exploitlabs.com/files/advisories/EXPL-A-2005-008-sitestudio.t
m/Mailing-Lists/Full-Disclosure/2005-05/0154.html - http://exploitlabs.com/files/advisories/EXPL-A-2005-008-sitestudio.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/20496 - http://www.psoft.net/misc/hsphere_winbox_security_update_guestbook.html - http://www.osvdb.org/16240 - http://www.securityfocus.com/bid/13554 - http://www.psoft.net/SS/ss_16_security_update_guestbook.html
CVE ID: CVE-2005-1606 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:24.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13559 - http://www.osvdb.org/16239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20522 - http://secunia.com/advisories/15287 - http://exploitlabs.com/files/advisories/EXPL-A-2005-007-hsphere.txt - http://www.psoft.net/misc/hsphere_winbox_secur
7 - http://exploitlabs.com/files/advisories/EXPL-A-2005-007-hsphere.txt - http://www.psoft.net/misc/hsphere_winbox_security_update_passwd.html
CVE ID: CVE-2005-1607 State: PUBLISHED Published: 2005-05-16T04:00:00Z Last Updated: 2024-09-17T03:28:47.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in shop.cgi in Remote Cart allows remote attackers to inject arbitrary web script or HTML via the (1) merchant or (2) demo parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013903 - http://www.governmentsecurity.org/forum/lofiversion/index.php/t14715.html - http://www.osvdb.org/16454
CVE ID: CVE-2005-1608 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:23.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unknown vulnerabilities in the Blocks module in Spidean AutoTheme 1.7 and AT-Lite for PostNuke have unknown impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13539 - http://secunia.com/advisories/15289 - http://www.osvdb.org/16346 - http://securitytracker.com/id?1013908 - http://news.postnuke.com/Article2687.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/20490
CVE ID: CVE-2005-1609 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:23.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Sun StorEdge 6130 Arrays (SE6130) with serial numbers between 0451AWF00G and 0513AWF00J allows local users and remote attackers to delete data. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16325 - http://secunia.com/advisories/15306 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20542 - http://www.kb.cert.org/vuls/id/812438 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57771-1 - http://www.vupen.com/english/advisories/2005/0491 - http://www.
solve.sun.com/search/document.do?assetkey=1-26-57771-1 - http://www.vupen.com/english/advisories/2005/0491 - http://www.securityfocus.com/bid/13566 - http://securitytracker.com/id?1013921
CVE ID: CVE-2005-1610 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:23.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in security.php for Tru-Zone NukeET 3.0 and 3.1 allows remote attackers to inject arbitrary web script or HTML via a base64 encoded Codigo parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013936 - http://www.securityfocus.com/bid/13570 - http://lostmon.blogspot.com/2005/05/nukeet-codigo-variable-cross-site.html - http://secunia.com/advisories/15332 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20540 - http://www.osvdb.or
- http://secunia.com/advisories/15332 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20540 - http://www.osvdb.org/16214
CVE ID: CVE-2005-1611 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:24.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebX in Web Crossing 5.x allows remote attackers to inject arbitrary web script or HTML via a URL with an "@" followed by the desired script. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20381 - http://secunia.com/advisories/15218 - http://www.securityfocus.com/bid/13482 - http://osvdb.org/ref/16/16070-webcrossing.txt - http://www.osvdb.org/16070
CVE ID: CVE-2005-1612 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:23.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in read.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to execute arbitrary SQL commands via the TID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13624 - http://marc.info/?l=bugtraq&m=111601780332632&w=2
CVE ID: CVE-2005-1613 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:23.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in member.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to inject arbitrary web script or HTML via the reverse parameter in a list action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13625 - http://marc.info/?l=bugtraq&m=111601780332632&w=2
CVE ID: CVE-2005-1614 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:24.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the postorder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111600262424876&w=2 - http://www.securityfocus.com/bid/13621
CVE ID: CVE-2005-1615 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:23.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, which is not properly handled by textdb.inc.php, possibly due to a SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13622 - http://marc.info/?l=bugtraq&m=111600262424876&w=2
CVE ID: CVE-2005-1616 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:23.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to obtain sensitive information via an invalid (1) id or possibly (2) postorder parameter, which reveals the path in an error message when a file can not be opened. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111600262424876&w=2
CVE ID: CVE-2005-1617 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:23.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Willings WebCam and WebCam Lite 2.8 and earlier stores the password in memory in plaintext, which allows local users to gain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111601481221137&w=2
CVE ID: CVE-2005-1618 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:23.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service (disconnect) via a room login or a room join request packet with a third : (colon) and an & (ampersand), which causes Messenger to send a corrupted packet to the server, which triggers a disconnect from the server. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111601904204055&w=2 - http://www.securityfocus.com/bid/13626 - http://www.osvdb.org/16816
CVE ID: CVE-2005-1619 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:24.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) start_page.css.php3 (aka start-page.css.php3) or (2) style.css.php3 in PHPMyChat 0.14.5 allow remote attackers to inject arbitrary web script or HTML commands via the FontName parameter. NOTE: it was later reported that 0.14.5 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13627 - http://www.securityfocus.com/archive/1/484575/100/0/threaded - http://marc.info/?l=bugtraq&m=111602076500031&w=2 - http://
tp://www.securityfocus.com/archive/1/484575/100/0/threaded - http://marc.info/?l=bugtraq&m=111602076500031&w=2 - http://www.securityfocus.com/bid/13628
CVE ID: CVE-2005-1620 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:23.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Skull-Splitter Guestbook 1.0, 2.0 and 2.2 allows remote attackers to inject arbitrary web script or HTML via the (1) title or (2) content of a message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111609838307070&w=2 - http://www.m0r1n3x.com/Skull-splitter_adv.txt
CVE ID: CVE-2005-1621 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:23.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the pnModFunc function in pnMod.php for PostNuke 0.750 through 0.760rc4 allows remote attackers to read arbitrary files via a .. (dot dot) in the func parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/0553 - http://news.postnuke.com/Article2690.html - http://cvs.postnuke.com/viewcvs.cgi/Historic_PostNuke_Library/postnuke-devel/html/includes/pnMod.php.diff?r1=1.47&r2=1.48 - http://marc.info/?l=bugtraq&m=11162
toric_PostNuke_Library/postnuke-devel/html/includes/pnMod.php.diff?r1=1.47&r2=1.48 - http://marc.info/?l=bugtraq&m=111627124301526&w=2 - http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2691
CVE ID: CVE-2005-1622 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:59:24.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in productsByCategory.asp in MetaCart e-Shop allows remote attackers to inject arbitrary web script or HTML via the strCatalog_NAME parameter. Additional Analyst Notes: - CVE Program Container: References: - http://echo.or.id/adv/adv13-theday-2005.txt - http://marc.info/?l=bugtraq&m=111627073203176&w=2
CVE ID: CVE-2005-1625 State: PUBLISHED Published: 2005-07-05T04:00:00 Last Updated: 2024-08-07T21:59:24.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the UnixAppOpenFilePerform function in Adobe Reader 5.0.9 and 5.0.10 for Unix allows remote attackers to execute arbitrary code via a PDF document with a long /Filespec tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=279&type=vulnerabilities - http://www.adobe.com/support/techdocs/329083.html - http://www.redhat.com/support/errata/RHSA-2005-575.html - http://www.novell.com/linux/security/advisories/2005_42_acroread.html