Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-3051 State: PUBLISHED Published: 2005-09-23T04:00:00 Last Updated: 2024-08-07T22:53:30.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ARJ plugin (arj.dll) 3.9.2.0 for 7-Zip 3.13, 4.23, and 4.26 BETA, as used in products including Turbo Searcher, allows remote attackers to execute arbitrary code via a large ARJ block. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14925 - http://secunia.com/secunia_research/2005-45/advisory/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/30438 - http://www.vupen.com/english/advisories/2006/4603 - http://securitytracker.com/id?1017261
ud.com/vulnerabilities/30438 - http://www.vupen.com/english/advisories/2006/4603 - http://securitytracker.com/id?1017261 - http://www.vuln.sg/turbosearcher330-en.html - http://www.securityfocus.com/bid/21208 - http://secunia.com/advisories/23004 - http://secunia.com/advisories/16664/ - http://marc.info/?l=bugtraq&m=112749134603258&w=2
CVE ID: CVE-2005-3052 State: PUBLISHED Published: 2005-09-23T04:00:00 Last Updated: 2024-08-07T22:53:30.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in module/down.inc.php in jportal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the search field to download.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/20 - http://marc.info/?l=bugtraq&m=112748957426316&w=2
CVE ID: CVE-2005-3053 State: PUBLISHED Published: 2005-09-26T04:00:00 Last Updated: 2024-08-07T22:53:30.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sys_set_mempolicy function in mempolicy.c in Linux kernel 2.6.x allows local users to cause a denial of service (kernel BUG()) via a negative first argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-808.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://secunia.com/advisories/17364 - http://linux.bkbits.net:8080/linux-2.6/cset%4042eef8b09C5r6iI0LuMe5Uy3k05c5g - https://oval.cisecurity.org/repository/search/definition/oval%3A
:8080/linux-2.6/cset%4042eef8b09C5r6iI0LuMe5Uy3k05c5g - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10576 - http://www.securityfocus.com/bid/15049 - http://secunia.com/advisories/17826 - http://secunia.com/advisories/17141 - http://www.ubuntu.com/usn/usn-199-1 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://www.debian.org/security/2006/dsa-1017 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://secunia.com/advisories/19374
CVE ID: CVE-2005-3054 State: PUBLISHED Published: 2005-09-26T04:00:00 Last Updated: 2024-08-07T22:53:30.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: fopen_wrappers.c in PHP 4.4.0, and possibly other versions, does not properly restrict access to other directories when the open_basedir directive includes a trailing slash, which allows PHP scripts in one directory to access files in other directories whose names are substrings of the original directory. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323585 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:213 - http://lists.trustix.org/pipermail/t
.cgi?bug=323585 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:213 - http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html - http://www.vupen.com/english/advisories/2005/1862 - http://www.vupen.com/english/advisories/2005/2254 - https://usn.ubuntu.com/207-1/ - http://www.securityfocus.com/bid/14957 - http://secunia.com/advisories/17371 - http://www.php.net/release_4_4_1.php - http://secunia.com/advisories/17510 - http://secunia.com/advisories/17557 - http://secunia.com/advisories/17229 - http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml
CVE ID: CVE-2005-3055 State: PUBLISHED Published: 2005-09-26T04:00:00 Last Updated: 2024-08-07T22:53:30.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.6.8 to 2.6.14-rc2 allows local users to cause a denial of service (kernel OOPS) via a userspace process that issues a USB Request Block (URB) to a USB device and terminates before the URB is finished, which leads to a stale pointer reference. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:235 - http://www.redhat.com/support/errata/RHSA-2006-0437.html - http://secunia.com/advisories/17917 - http://www.securityfocus.com/advisories/9806 -
upport/errata/RHSA-2006-0437.html - http://secunia.com/advisories/17917 - http://www.securityfocus.com/advisories/9806 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://www.redhat.com/support/errata/RHSA-2006-0579.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9472 - http://marc.info/?l=linux-kernel&m=112766129313883 - http://secunia.com/advisories/21136 - http://www.securityfocus.com/archive/1/419522/100/0/threaded - http://secunia.com/advisories/21983 - http://secunia.com/advisories/21035 - http://www.redhat.com/support/errata/RHSA-2006-0575.html - https://usn.ubuntu.com/219-1/ - http://www.redhat.com/support/errata/RH
.redhat.com/support/errata/RHSA-2006-0575.html - https://usn.ubuntu.com/219-1/ - http://www.redhat.com/support/errata/RHSA-2006-0580.html - http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm - http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 - http://secunia.com/advisories/21465 - http://www.securityfocus.com/bid/14955 - http://secunia.com/advisories/17826 - http://www.vupen.com/english/advisories/2005/1863 - http://secunia.com/advisories/17918 - http://www.debian.org/security/2006/dsa-1017 - http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://secunia.com/advisories/22417 - http://sec
htm - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://secunia.com/advisories/22417 - http://secunia.com/advisories/19374
CVE ID: CVE-2005-3056 State: PUBLISHED Published: 2019-11-01T12:40:12 Last Updated: 2024-08-07T22:53:30.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: TWiki allows arbitrary shell command execution via the Include function Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2005-3056 - https://twiki.org/cgi-bin/view/Codev/SecurityAlertExecuteCommandsWithInclude - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330733
CVE ID: CVE-2005-3057 State: PUBLISHED Published: 2006-02-14T19:00:00 Last Updated: 2024-08-07T22:53:30.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and other versions before 3.0 MR1, allows remote attackers to bypass the Fortinet FTP anti-virus engine by sending a STOR command and uploading a file before the FTP server response has been sent, as demonstrated using LFTP. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042139.html - http://www.securityfocus.com/bid/16597 - http://marc.info/?l=bugtraq&m=113986337408103&w=2 -
2006-February/042139.html - http://www.securityfocus.com/bid/16597 - http://marc.info/?l=bugtraq&m=113986337408103&w=2 - http://secunia.com/advisories/18844 - http://www.vupen.com/english/advisories/2006/0539 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24624
CVE ID: CVE-2005-3058 State: PUBLISHED Published: 2006-02-14T19:00:00 Last Updated: 2024-08-07T22:53:30.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP request terminated with a line feed (LF) and not carriage return line feed (CRLF) or (2) HTTP request with no Host field, which is still processed by most web servers without violating RFC2616. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042140.html - http://www.securityfocus.com/archive/1/42
http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042140.html - http://www.securityfocus.com/archive/1/424858/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24626 - http://www.securityfocus.com/bid/16599 - http://secunia.com/advisories/18844 - http://www.fortiguard.com/advisory/FGA-2006-10.html - http://www.vupen.com/english/advisories/2006/0539
CVE ID: CVE-2005-3059 State: PUBLISHED Published: 2005-09-26T04:00:00 Last Updated: 2024-08-07T22:53:30.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Opera 8.50 on Linux and Windows have unknown impact and attack vectors, related to (1) " handling of must-revalidate cache directive for HTTPS pages" or (2) a "display issue with cookie comment encoding." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/1789 - http://www.opera.com/docs/changelogs/windows/850/ - http://www.opera.com/docs/changelogs/linux/850/ - http://secunia.com/advisories/16645
CVE ID: CVE-2005-3060 State: PUBLISHED Published: 2005-09-30T04:00:00 Last Updated: 2024-08-07T22:53:30.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in getconf in IBM AIX 5.2 to 5.3 allows local users to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/19719 - http://secunia.com/advisories/16996 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22442 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY73850 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY73814 - http://www.securityfocus.com/bid/14959 - http://www.kb.cert.org/vuls/id/602300 - http://securitytracker.co
isg1IY73814 - http://www.securityfocus.com/bid/14959 - http://www.kb.cert.org/vuls/id/602300 - http://securitytracker.com/id?1014991
CVE ID: CVE-2005-3061 State: PUBLISHED Published: 2005-09-27T04:00:00 Last Updated: 2024-08-07T22:53:30.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in PowerArchiver 8.10 through 9.5 Beta 4 and Beta 5 allow remote attackers to execute arbitrary code via a long filename in a (1) ACE or (2) ARJ archive. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/23 - http://secunia.com/secunia_research/2005-50/advisory/ - http://secunia.com/advisories/16713/ - http://www.securityfocus.com/bid/14922 - http://marc.info/?l=bugtraq&m=112748874211458&w=2
CVE ID: CVE-2005-3062 State: PUBLISHED Published: 2005-09-27T04:00:00 Last Updated: 2024-08-07T22:53:30.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in AlstraSoft E-Friends 4.0 allows remote attackers to execute arbitrary PHP code via the mode parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16941/ - http://securityreason.com/securityalert/22 - http://marc.info/?l=bugtraq&m=112758134227112&w=2 - http://www.securityfocus.com/bid/14932
CVE ID: CVE-2005-3063 State: PUBLISHED Published: 2005-09-27T04:00:00 Last Updated: 2024-08-07T22:53:30.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in MailGust 1.9 allows remote attackers to execute arbitrary SQL commands via the email field on the password reminder page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14933 - http://marc.info/?l=bugtraq&m=112758146618234&w=2 - http://secunia.com/advisories/16937/ - http://securityreason.com/securityalert/21 - http://rgod.altervista.org/maildisgust.html
CVE ID: CVE-2005-3064 State: PUBLISHED Published: 2005-09-27T04:00:00Z Last Updated: 2024-09-16T18:02:48.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: MultiTheftAuto 0.5 patch 1 and earlier does not properly verify client privileges when running command 40, which allows remote attackers to change or delete the message of the day (motd.txt). Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/mtaboom-adv.txt - http://secunia.com/advisories/16926/ - http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037384.html
CVE ID: CVE-2005-3065 State: PUBLISHED Published: 2005-09-27T04:00:00 Last Updated: 2024-08-07T23:01:57.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: MultiTheftAuto 0.5 patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted command 40 that causes a -1 length to be used and triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16926/ - http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037384.html - http://securityreason.com/securityalert/26
CVE ID: CVE-2005-3066 State: PUBLISHED Published: 2005-09-27T04:00:00 Last Updated: 2024-08-07T23:01:57.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in perldiver.pl in PerlDiver 1.x allows remote attackers to inject arbitrary web script or HTML via the query string. NOTE: this issue was originally disputed by the vendor, but it has since been acknowledged. Additional Analyst Notes: - CVE Program Container: References: - http://www.scriptsolutions.com/support/showflat.pl?Board=PDBugs&Number=443 - http://www.scriptsolutions.com/support/showthreaded.pl?Cat=&Board=PDBugs&Number=443&Search=true&Forum=All_Forums&Words=werner&Match=Entire%
lutions.com/support/showthreaded.pl?Cat=&Board=PDBugs&Number=443&Search=true&Forum=All_Forums&Words=werner&Match=Entire%20Phrase&Searchpage=0&Limit=25&Old=1month&Main=443 - http://exploitlabs.com/files/advisories/EXPL-A-2005-014-perldiver.txt - http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0543.html - http://www.scriptsolutions.com/support/showthreaded.pl?Cat=&Board=PDBugs&Number=447&page=0&view=collapsed&sb=5&o=186&vc=1#Post447 - http://securitytracker.com/id?1015146
CVE ID: CVE-2005-3067 State: PUBLISHED Published: 2005-09-27T04:00:00 Last Updated: 2024-08-07T23:01:57.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in perldiver.cgi in PerlDiver 2.x allows remote attackers to inject arbitrary web script or HTML via the module parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.scriptsolutions.com/support/showthreaded.pl?Cat=&Board=PDBugs&Number=443&Search=true&Forum=All_Forums&Words=werner&Match=Entire%20Phrase&Searchpage=0&Limit=25&Old=1month&Main=443 - http://exploitlabs.com/files/advisories/EXPL-A-2005-014-perldiver.txt - http://archives.neohapsis.com/archives/
in=443 - http://exploitlabs.com/files/advisories/EXPL-A-2005-014-perldiver.txt - http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0543.html - http://securitytracker.com/id?1015146
CVE ID: CVE-2005-3068 State: PUBLISHED Published: 2005-09-27T04:00:00 Last Updated: 2024-08-07T23:01:57.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Eric Integrated Development Environment (eric3) before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit." Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=119070&release_id=357174 - http://www.securityfocus.com/bid/14905 - http://secunia.com/advisories/16993 - http://www.debian.org/security/2005/dsa-869 - http://secunia.com/advisories/17269 - http://securitytracker.com/id?1014947 - http://www.s
n.org/security/2005/dsa-869 - http://secunia.com/advisories/17269 - http://securitytracker.com/id?1014947 - http://www.securityfocus.com/advisories/9643
CVE ID: CVE-2005-3069 State: PUBLISHED Published: 2005-09-27T04:00:00 Last Updated: 2024-08-07T23:01:57.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the xferfax$$ temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17022 - http://www.securityfocus.com/bid/14907 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=329384 - http://www.debian.org/security/2005/dsa-865 - http://www.gentoo.org/security/en/glsa/glsa-200509-21.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2005:177 - http://secunia
g/security/en/glsa/glsa-200509-21.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2005:177 - http://secunia.com/advisories/16906 - http://secunia.com/advisories/17187 - http://secunia.com/advisories/17107
CVE ID: CVE-2005-3070 State: PUBLISHED Published: 2005-09-27T04:00:00 Last Updated: 2024-08-07T23:01:57.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15043 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:177 - http://secunia.com/advisories/17107 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=329384
CVE ID: CVE-2005-3071 State: PUBLISHED Published: 2005-09-27T04:00:00 Last Updated: 2024-08-07T23:01:57.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Unix File System (UFS) on Solaris 8 and 9, when logging is enabled, allows local users to cause a denial of service ("soft hang") via certain write operations to UFS. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22389 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101940-1 - http://www.osvdb.org/19640 - http://secunia.com/advisories/16924 - http://www.vupen.com/english/advisories/2005/1821
CVE ID: CVE-2005-3072 State: PUBLISHED Published: 2005-09-27T04:00:00 Last Updated: 2024-08-07T23:01:57.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14931 - http://www.vupen.com/english/advisories/2005/1829 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22386 - http://www.osvdb.org/19652 - http://secunia.com/advisories/16923
CVE ID: CVE-2005-3073 State: PUBLISHED Published: 2005-09-27T04:00:00 Last Updated: 2024-08-07T23:01:57.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the (1) "mike", (2) "standard", or (3) "foundation" demo, allows attackers to inject Interchange Tag Language (ITL) elements into the forum/submit.html page. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22387 - http://www.securityfocus.com/bid/14931 - http://secunia.com/advisories/16923 - http://www.icdevgroup.org/piperma
22387 - http://www.securityfocus.com/bid/14931 - http://secunia.com/advisories/16923 - http://www.icdevgroup.org/pipermail/interchange-announce/2005/000049.html - http://www.icdevgroup.org/pipermail/interchange-announce/2005/000050.html - http://www.osvdb.org/19653
CVE ID: CVE-2005-3074 State: PUBLISHED Published: 2005-09-27T04:00:00Z Last Updated: 2024-09-16T18:45:20.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute arbitrary SQL commands via crafted syslog messages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16947 - http://www.rsyslog.com/Article35.phtml
CVE ID: CVE-2005-3075 State: PUBLISHED Published: 2005-09-27T04:00:00Z Last Updated: 2024-09-17T02:32:43.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Zengaia before 0.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16896 - http://www.mpc-donkey.de/zengaia/ChangeLog.txt
CVE ID: CVE-2005-3076 State: PUBLISHED Published: 2005-09-27T04:00:00 Last Updated: 2024-08-07T23:01:57.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error messages via invalid (1) pid, (2) blogid, (3) cid, or (4) m parameters to archive.php, or the (5) blogid parameter to blogadmin.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16881 - http://securityreason.com/securityalert/755 - http://www.securityfocus.com/bid/14897 - http://www.simplog.org/bugs/bug.php?op=show&bugid=55
CVE ID: CVE-2005-3077 State: PUBLISHED Published: 2005-09-27T04:00:00Z Last Updated: 2024-09-16T22:09:04.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.2.3 for Mac OS allows remote attackers to cause a denial of service (crash) via a web page with malformed attributes in a BGSOUND tag, possibly involving double-quotes in an about: URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14899
CVE ID: CVE-2005-3078 State: PUBLISHED Published: 2005-09-27T04:00:00Z Last Updated: 2024-09-16T22:15:37.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PunBB before 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the "forgotten e-mail" feature. Additional Analyst Notes: - CVE Program Container: References: - http://www.punbb.org/changelogs/1.2.7_to_1.2.8.txt - http://secunia.com/advisories/16908
CVE ID: CVE-2005-3079 State: PUBLISHED Published: 2005-09-27T04:00:00 Last Updated: 2024-08-07T23:01:57.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection. Additional Analyst Notes: - CVE Program Container: References: - http://www.punbb.org/changelogs/1.2.7_to_1.2.8.txt - http://secunia.com/advisories/16908
CVE ID: CVE-2005-3080 State: PUBLISHED Published: 2005-09-27T04:00:00Z Last Updated: 2024-09-16T22:03:36.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary files via the language field without a source field set. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=358285 - http://www.securityfocus.com/bid/14903
CVE ID: CVE-2005-3081 State: PUBLISHED Published: 2005-09-27T04:00:00 Last Updated: 2024-08-07T23:01:57.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE command. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/19682 - http://www.securiteam.com/exploits/5CP0R1PGUE.html - http://www.debian.org/security/2006/dsa-1006 - http://secunia.com/advisories/16936 - http://www.securityfocus.com/bid/14935 - http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0646.html