Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.com/advisories/18160 - http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00582373 - http://www.vupen.com/english/advisories/2005/3001 - http://securitytracker.com/alerts/2005/Dec/1015377.html
CVE ID: CVE-2005-4351 State: PUBLISHED Published: 2006-01-09T20:00:00 Last Updated: 2024-08-07T23:38:51.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: The securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1.2, and Linux up to 2.6.15 allows root users to bypass immutable settings for files by mounting another filesystem that masks the immutable files while the system is running. Additional Analyst Notes: - CVE Program Container: References: - http://www.redteam-pentesting.de/advisories/rt-sa-2005-015.txt - http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041177.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/
s.grok.org.uk/pipermail/full-disclosure/2006-January/041177.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24037 - http://www.redteam-pentesting.de/advisories/rt-sa-2005-15.txt - http://archives.neohapsis.com/archives/openbsd/2005-10/1523.html
CVE ID: CVE-2005-4352 State: PUBLISHED Published: 2006-01-09T20:00:00 Last Updated: 2024-08-07T23:38:51.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: The securelevels implementation in NetBSD 2.1 and earlier, and Linux 2.6.15 and earlier, allows local users to bypass time setting restrictions and set the clock backwards by setting the clock ahead to the maximum unixtime value (19 Jan 2038), which then wraps around to the minimum value (13 Dec 1901), which can then be set ahead to the desired time, aka "settimeofday() time wrap." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/421426/100/0/threaded - http://lists.grok.o
CVE Program Container: References: - http://www.securityfocus.com/archive/1/421426/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041178.html - http://www.redteam-pentesting.de/advisories/rt-sa-2005-16.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/24036 - http://www.securityfocus.com/bid/16170 - http://www.securityfocus.com/archive/1/471457 - http://securitytracker.com/id?1015454 - http://secunia.com/advisories/25691
CVE ID: CVE-2005-4353 State: PUBLISHED Published: 2005-12-20T00:00:00 Last Updated: 2024-08-07T23:46:03.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in toendaCMS 0.6.2.1, when configured to use a SQL database, allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21768 - http://secunia.com/advisories/18058 - http://www.vupen.com/english/advisories/2005/2926
CVE ID: CVE-2005-4354 State: PUBLISHED Published: 2005-12-20T01:00:00 Last Updated: 2024-08-07T23:46:03.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2966 - http://secunia.com/advisories/18076
CVE ID: CVE-2005-4355 State: PUBLISHED Published: 2005-12-20T01:00:00 Last Updated: 2024-08-07T23:46:03.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in UStore allow remote attackers to inject arbitrary web script or HTML via the (1) Cat parameter in default.asp and the (2) accessdenied parameter in admin/default.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21980 - http://secunia.com/advisories/18026 - http://www.osvdb.org/21979 - http://www.vupen.com/english/advis
.osvdb.org/21980 - http://secunia.com/advisories/18026 - http://www.osvdb.org/21979 - http://www.vupen.com/english/advisories/2005/2990
CVE ID: CVE-2005-4356 State: PUBLISHED Published: 2005-12-20T01:00:00 Last Updated: 2024-08-07T23:46:04.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in UStore allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21981 - http://secunia.com/advisories/18026 - http://www.vupen.com/english/advisories/2005/2990
CVE ID: CVE-2005-4357 State: PUBLISHED Published: 2005-12-20T01:00:00 Last Updated: 2024-08-07T23:46:04.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpBB 2.0.18, when "Allowed HTML tags" is enabled, allows remote attackers to inject arbitrary Javascript via a permitted HTML tag with " (quote) characters and active attributes such as onmouseover. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=113484567432679&w=2 - http://www.vupen.com/english/advisories/2005/2991 - http://secunia.com/advisories/18252 - http://www.securityfocus.com/archive/1/420537/100/0/threaded - http://sec
5/2991 - http://secunia.com/advisories/18252 - http://www.securityfocus.com/archive/1/420537/100/0/threaded - http://secunia.com/advisories/18125 - http://www.phpbb.com/phpBB/viewtopic.php?t=352966 - http://securityreason.com/securityalert/269 - http://www.osvdb.org/21803 - http://securityreason.com/achievement_securityalert/29 - http://www.vupen.com/english/advisories/2006/0010
CVE ID: CVE-2005-4358 State: PUBLISHED Published: 2005-12-20T01:00:00 Last Updated: 2024-08-07T23:46:04.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/admin_disallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path via a direct request with a non-empty setmodules parameter, which causes an invalid append_sid function call that leaks the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=113484567432679&w=2 - http://www.vupen.com/english/advisories/2005/2991 - http://secunia.com/advisories/18252 - http://www.securityfocus.com/archive/1/420537/100/0/threaded - http://
2005/2991 - http://secunia.com/advisories/18252 - http://www.securityfocus.com/archive/1/420537/100/0/threaded - http://secunia.com/advisories/18125 - http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=352966 - http://securityreason.com/achievement_securityalert/29 - http://securityreason.com/securityalert/269 - http://www.vupen.com/english/advisories/2006/0010 - http://www.osvdb.org/21804
CVE ID: CVE-2005-4359 State: PUBLISHED Published: 2005-12-20T01:00:00 Last Updated: 2024-08-07T23:46:04.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in includes/core.inc.php in ODFaq 2.1.0 allows remote attackers to execute arbitrary SQL commands via the (1) cat and (2) srcText parameters to faq.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21790 - http://pridels0.blogspot.com/2005/12/odfaq-sql-inj-vuln.html - http://www.vupen.com/english/advisories/2005/2994 - http://secunia.com/advisories/18121
CVE ID: CVE-2005-4360 State: PUBLISHED Published: 2005-12-20T01:00:00 Last Updated: 2024-08-07T23:46:04.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "~0" through "~9", which causes ntdll.dll to produce a return value that is not correctly handled by IIS, as demonstrated using "/_vti_bin/.dll/*/~0". NOTE: the consequence was originally believed to be only a denial of service (application crash and reboot). Additional Analyst Notes: - CVE Program Container: References
e only a denial of service (application crash and reboot). Additional Analyst Notes: - CVE Program Container: References: - http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html - http://www.securityfocus.com/archive/1/419707/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1703 - http://securityreason.com/securityalert/271 - http://securitytracker.com/alerts/2005/Dec/1015376.html - http://www.osvdb.org/21805 - http://ingehenriksen.blogspot.com/2005/12/microsoft-iis-remote-dos-dll-url.html - http://www.vupen.com/english/advisories/2005/2963 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-041 -
n.com/english/advisories/2005/2963 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-041 - http://www.securityfocus.com/bid/15921 - http://www.us-cert.gov/cas/techalerts/TA07-191A.html - http://secunia.com/advisories/18106
CVE ID: CVE-2005-4361 State: PUBLISHED Published: 2005-12-20T01:00:00 Last Updated: 2024-08-07T23:46:04.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.html in Magnolia Content Management Suite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21795 - http://secunia.com/advisories/18104 - http://www.securityfocus.com/bid/15954 - http://www.vupen.com/english/advisories/2005/2989 - http://pridels0.blogspot.com/2005/12/magnolia-xss-vuln.html
CVE ID: CVE-2005-4362 State: PUBLISHED Published: 2005-12-20T01:00:00 Last Updated: 2024-08-07T23:46:04.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in page.php in Komodo CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15966 - http://secunia.com/advisories/18120 - http://www.vupen.com/english/advisories/2005/2993 - http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html
CVE ID: CVE-2005-4363 State: PUBLISHED Published: 2005-12-20T01:00:00 Last Updated: 2024-08-07T23:46:04.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15966 - http://secunia.com/advisories/18120 - http://www.vupen.com/english/advisories/2005/2993 - http://www.osvdb.org/21793 - http://www.osvdb.org/21792 - http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html
CVE ID: CVE-2005-4364 State: PUBLISHED Published: 2005-12-20T01:00:00 Last Updated: 2024-08-07T23:46:04.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2992 - http://secunia.com/advisories/18126 - http://pridels0.blogspot.com/2005/12/hot-banana-xss-vuln.html - http://www.securityfocus.com/bid/15948 - http://www.osvdb.org/21786
CVE ID: CVE-2005-4365 State: PUBLISHED Published: 2005-12-20T01:00:00 Last Updated: 2024-08-07T23:46:04.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter in text.php and (2) frame parameter in forum.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21788 - http://www.osvdb.org/21789 - http://pridels0.blogspot.com/2005/12/flip-xss-vuln.html - http://www.vupen.com/english/advisories/2005/2987 - http://www.securityfocus.com/bid/15947 - http://secunia.com/advisories/18128
CVE ID: CVE-2005-4366 State: PUBLISHED Published: 2005-12-20T01:00:00 Last Updated: 2024-08-07T23:46:04.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DRZES HMS 3.2 allow remote attackers to execute arbitrary SQL commands via the (1) plan_id parameter to (a) domains.php, (b) viewusage.php, (c) pop_accounts.php, (d) databases.php, (e) ftp_users.php, (f) crons.php, (g) pass_dirs.php, (h) zone_files.php, (i) htaccess.php, and (j) software.php; (2) the customerPlanID parameter to viewplan.php; (3) the ref_id parameter to referred_plans.php; (4) customerPlanID parameter to listcharges.php; and (5) the domain parameter to (k) pop_accounts.
o referred_plans.php; (4) customerPlanID parameter to listcharges.php; and (5) the domain parameter to (k) pop_accounts.php, (d) databases.php, (e) ftp_users.php, (f) crons.php, (g) pass_dirs.php, (h) zone_files.php, (i) htaccess.php, and (j) software.php. NOTE: the viewinvoice.php invoiceID vector is already covered by CVE-2005-4137. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21186 - http://www.osvdb.org/21183 - http://www.osvdb.org/21189 - http://www.osvdb.org/21187 - http://www.osvdb.org/21181 - http://www.osvdb.org/21180 - http://www.osvdb.org/21184 - http://www.osvdb.org/21188 - http://www.osvdb.org/21182 - http://www.osvdb.org/21179 - http://w
://www.osvdb.org/21184 - http://www.osvdb.org/21188 - http://www.osvdb.org/21182 - http://www.osvdb.org/21179 - http://www.osvdb.org/21192 - http://www.osvdb.org/21190 - http://www.osvdb.org/21185 - http://www.securityfocus.com/bid/15644 - http://pridels0.blogspot.com/2005/11/drzes-hms-32-multiple-vuln.html - http://www.osvdb.org/21191
CVE ID: CVE-2005-4367 State: PUBLISHED Published: 2005-12-20T01:00:00 Last Updated: 2024-08-07T23:46:04.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in register_domain.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the "Domain Availability" field. NOTE: this issue was later reported to affect CONTROLzx (renamed from DRZES) 3.3.4. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24177 - http://www.securityfocus.com/bid/15630 - http://www.osvdb.org/21193 - http://pridels0.blogspot.com/2005/11/drzes-hms-32-multiple-vuln
curityfocus.com/bid/15630 - http://www.osvdb.org/21193 - http://pridels0.blogspot.com/2005/11/drzes-hms-32-multiple-vuln.html - http://pridels0.blogspot.com/2006/03/controlzx-hms-hosting-management.html
CVE ID: CVE-2005-4368 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: roundcube webmail Alpha, with a default high verbose level ($rcmail_config['debug_level'] = 1), allows remote attackers to obtain the full path of the application via an invalid_task parameter, which leaks the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/422168/100/0/threaded - http://www.securityfocus.com/archive/1/419710/100/0/threaded - http://www.securityfocus.com/archive/1/418851/100/0/threaded
CVE ID: CVE-2005-4369 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Acuity CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly strSearchKeywords to browse.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15934 - http://pridels0.blogspot.com/2005/12/acuity-cms-26x-asp-xss-vuln.html - http://secunia.com/advisories/18070 - http://www.vupen.com/english/advisories/2005/2970 - http://www.osvdb.org/21794
CVE ID: CVE-2005-4370 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter to default.asp. Additional Analyst Notes: - CVE Program Container: References: - http://hamid.ir/security/acidcat.txt - http://secunia.com/advisories/18097 - http://www.osvdb.org/21845 - http://www.securityfocus.com/archive/1/419905/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/23870 - http://www.securityfocus.com/bid/15933
CVE ID: CVE-2005-4371 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acidcat 2.1.13 and earlier stores the database under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a request to databases/acidcat.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://hamid.ir/security/acidcat.txt - http://secunia.com/advisories/18097 - http://www.osvdb.org/22491 - http://www.securityfocus.com/archive/1/419905/100/0/threaded - http://www.securityfocus.com/bid/15933
CVE ID: CVE-2005-4372 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in account.html in Adaptive Website Framework (AWF) 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21914 - http://www.securityfocus.com/bid/15937 - http://pridels0.blogspot.com/2005/12/awf-adaptive-website-framework-vuln.html - http://www.awf-cms.org/news.html - http://www.vupen.com/english/advisories/2005/2973
CVE ID: CVE-2005-4373 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adaptive Website Framework (AWF) 2.10 and earlier allows remote attackers to obtain the full path of the application via an invalid mode parameter to community.html, which leaks the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21915 - http://pridels0.blogspot.com/2005/12/awf-adaptive-website-framework-vuln.html - http://www.awf-cms.org/news.html
CVE ID: CVE-2005-4374 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) s parameter to faq.asp and (2) searchQuery parameter to search.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15935 - http://pridels0.blogspot.com/2005/12/allinta-23x-xss-vuln.html - http://www.osvdb.org/21784 - http://www.vupen.com/english/advisories/2005/2971 - http://www.osvdb.org/21785 - http://secunia.com/advisorie
rg/21784 - http://www.vupen.com/english/advisories/2005/2971 - http://www.osvdb.org/21785 - http://secunia.com/advisories/18060
CVE ID: CVE-2005-4375 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Amaxus 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the change parameter. NOTE: it is possible that this is resultant from CVE-2005-4376. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18004 - http://www.securityfocus.com/bid/15936 - http://www.osvdb.org/21821 - http://pridels0.blogspot.com/2005/12/amaxus-vuln.html - http://www.vupen.com/english/advisories/2005/2972
CVE ID: CVE-2005-4376 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Amaxus 3 and earlier allows remote attackers to access arbitrary files via ".." sequences in the change parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40002 - http://pridels0.blogspot.com/2005/12/amaxus-vuln.html
CVE ID: CVE-2005-4377 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) PageID and (2) SiteNodeID parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21938 - http://pridels0.blogspot.com/2005/12/baseline-cms-vuln.html - http://www.vupen.com/english/advisories/2005/2974
CVE ID: CVE-2005-4378 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15961 - http://www.osvdb.org/21939 - http://pridels0.blogspot.com/2005/12/baseline-cms-vuln.html - http://www.vupen.com/english/advisories/2005/2974
CVE ID: CVE-2005-4379 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to inject arbitrary web script or HTML via the (1) sort_mode parameter to (a) fisheye/list_galleries.php, (b) messages/message_box.php, and (c) users/my.php; the (2) post_id parameter to (d) blogs/view_post.php; the (3) blog_id parameter to (e) blogs/view.php; and the (4) search field to (f) users/my_groups.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21924 - http://pridels0.b
ups.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21924 - http://pridels0.blogspot.com/2005/12/bitweaver-multiple-vuln.html - http://www.osvdb.org/21927 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23816 - http://www.bitweaver.org/forums/viewtopic.php?t=1299 - http://www.osvdb.org/21925 - http://www.osvdb.org/21928 - http://www.vupen.com/english/advisories/2005/2975 - http://www.osvdb.org/21926
CVE ID: CVE-2005-4380 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL commands via the (1) sort_mode parameter to (a) fisheye/list_galleries.php, (b) messages/message_box.php, and (c) users/my.php; the (2) post_id parameter to (d) blogs/view_post.php; and the (3) blog_id parameter to (e) blogs/view.php, which are not properly cleansed by the convert_sortmode function in kernel/BitDb.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21919
nction in kernel/BitDb.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21919 - http://pridels0.blogspot.com/2005/12/bitweaver-multiple-vuln.html - http://www.osvdb.org/21921 - http://www.securityfocus.com/bid/15962 - http://www.bitweaver.org/forums/viewtopic.php?t=1299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23814 - http://www.vupen.com/english/advisories/2005/2975 - http://www.osvdb.org/21920 - http://www.osvdb.org/21922 - http://www.osvdb.org/21923