Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-3718 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-07T23:24:35.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 does not allow users to disable access to (1) SNMP or (2) the rlogin port TCP 513, which allows remote attackers to exploit other vulnerabilities such as CVE-2005-3716, or execute arbitrary shell commands via rlogin, which does not require authentication. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038834.html - http://www.securityfocus.com/bid/15476 - http://www.
s.grok.org.uk/pipermail/full-disclosure/2005-November/038834.html - http://www.securityfocus.com/bid/15476 - http://www.vupen.com/english/advisories/2005/2472 - http://secunia.com/advisories/17629
CVE ID: CVE-2005-3719 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-07T23:24:36.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hitachi IP5000 VOIP WIFI Phone 1.5.6 has a hard-coded administrator password of "0000", which allows attackers with physical access to obtain sensitive information and modify the phone's configuration. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17628 - http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf - http://marc.info/?l=full-disclosure&m=113217425618951&w=2
CVE ID: CVE-2005-3720 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-07T23:24:36.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default index page in the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 lists sensitive information such as software versions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17628 - http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf - http://marc.info/?l=full-disclosure&m=113217425618951&w=2
CVE ID: CVE-2005-3721 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-07T23:24:35.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not require authentication for sensitive configuration pages, which allows remote attackers to modify configuration. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17628 - http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf - http://marc.info/?l=full-disclosure&m=113217425618951&w=2
CVE ID: CVE-2005-3722 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-07T23:24:35.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMP v1/v2c daemon in Hitachi IP5000 VOIP WIFI Phone 1.5.6 allows remote attackers to gain read or write access to system configuration using arbitrary SNMP credentials. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17628 - http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf - http://marc.info/?l=full-disclosure&m=113217425618951&w=2
CVE ID: CVE-2005-3723 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-07T23:24:35.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not allow the user to disable access to (1) SNMP or (2) TCP port 3390, which allows remote attackers to modify configuration using CVE-2005-3722, or access the Unidata Shell to obtain sensitive information or cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17628 - http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf - http://marc.info/?l=full-disclosure&m=113217425618951&w=2
CVE ID: CVE-2005-3724 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-07T23:24:35.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocumented and does not require authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21292 - http://www.securityfocus.com/bid/15478 - http://www.vupen.com/english/advisories/2005/2476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23092 - http://marc.info/?l=full-disclosure&m=11
sories/2005/2476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23092 - http://marc.info/?l=full-disclosure&m=113217443126673&w=2
CVE ID: CVE-2005-3725 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-07T23:24:35.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 uses hardcoded IP addresses for its DNS servers, which could allow remote attackers to cause a denial of service or hijack Zyxel phones by attacking or spoofing the hardcoded DNS servers. NOTE: it could be argued that this issue reflects an inherent limitation of DNS itself, so perhaps it should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15478 - http://marc.info/?l=full-disclosure&m=113217443126673&w=2
CVE ID: CVE-2005-3726 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-07T23:24:36.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Interspire ArticleLive NX 0.3 allows remote attackers to execute arbitrary SQL commands via the Query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/ref/20/20833-articlelive-sql.txt - http://www.securityfocus.com/bid/15480 - http://www.osvdb.org/20833 - http://www.vupen.com/english/advisories/2005/2467 - http://secunia.com/advisories/17585
CVE ID: CVE-2005-3727 State: PUBLISHED Published: 2005-11-21T11:00:00Z Last Updated: 2024-09-16T18:34:57.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in debug/query_results.jsp in Idetix Software Systems Revize CMS allows remote attackers to execute arbitrary SQL commands via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20919 - http://www.osvdb.org/20920 - http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html - http://secunia.com/advisories/17623 - http://www.securityfocus.com/bid/15481 - http://securitytracker.com/id?1015231
CVE ID: CVE-2005-3728 State: PUBLISHED Published: 2005-11-21T11:00:00Z Last Updated: 2024-09-17T03:22:35.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Idetix Software Systems Revize CMS stores conf/revize.xml under the web document root with insufficient access control, which allows remote attackers to obtain sensitive configuration information. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html - http://secunia.com/advisories/17623 - http://www.securityfocus.com/bid/15482 - http://securitytracker.com/id?1015231
CVE ID: CVE-2005-3729 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-07T23:24:35.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Idetix Software Systems Revize CMS allows remote attackers to obtain sensitive information via direct requests to files in the revize/debug directory, such as (1) apptables.html and (2) main.html. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html - http://secunia.com/advisories/17623 - http://securitytracker.com/id?1015231 - http://www.osvdb.org/20921
CVE ID: CVE-2005-3730 State: PUBLISHED Published: 2005-11-21T11:00:00Z Last Updated: 2024-09-16T18:39:21.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allow remote attackers to inject arbitrary web script or HTML via the (1) resourcetype, (2) objectmap, and (3) redirect parameters, possibly involving setWebSpace.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html - http://secunia.com/advisories/17623 - http://www.securityfocus.com/bid/15484 - http://www.osvdb.org/2
-disclosure.html - http://secunia.com/advisories/17623 - http://www.securityfocus.com/bid/15484 - http://www.osvdb.org/20922 - http://securitytracker.com/id?1015231
CVE ID: CVE-2005-3731 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-07T23:24:35.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in yaSSL before 1.0.6 has unknown impact and attack vectors, related to "certificate chain processing." Additional Analyst Notes: - CVE Program Container: References: - http://yassl.com/release.html - http://secunia.com/advisories/17619 - http://www.securityfocus.com/bid/15487 - http://www.osvdb.org/20831
CVE ID: CVE-2005-3732 State: PUBLISHED Published: 2005-11-21T22:00:00 Last Updated: 2024-08-07T23:24:36.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.sourceforge.net/viewcvs.py/ipsec-tools/ipsec-tools/src/racoon/isakmp_agg.c?r1=1.20.2.3&r2=1.20.2.4&diff_format=u - https://oval.cisecurity.org/r
py/ipsec-tools/ipsec-tools/src/racoon/isakmp_agg.c?r1=1.20.2.3&r2=1.20.2.4&diff_format=u - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9857 - http://secunia.com/advisories/18616 - http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en - http://secunia.com/advisories/20210 - http://www.securityfocus.com/bid/15523 - http://sourceforge.net/mailarchive/forum.php?thread_id=9017454&forum_id=32000 - http://securitytracker.com/id?1015254 - http://www.debian.org/security/2006/dsa-965 - http://archives.neohapsis.com/archives/bugtraq/2005-12/0161.html - http://secunia.com/advisories/18742 - http://www.gentoo.org/security/en/glsa/glsa-200512-04.xml -
q/2005-12/0161.html - http://secunia.com/advisories/18742 - http://www.gentoo.org/security/en/glsa/glsa-200512-04.xml - http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/ - ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc - http://rhn.redhat.com/errata/RHSA-2006-0267.html - http://secunia.com/advisories/19833 - http://secunia.com/advisories/17668 - http://www.securityfocus.com/archive/1/436343/100/0/threaded - http://secunia.com/advisories/18115 - http://secunia.com/advisories/17822 - https://usn.ubuntu.com/221-1/ - http://www.mandriva.com/security/advisories?name=MDKSA-2006:020 - http://secunia.com/advisories/17980 - http://www.vupen.com/english/advisori
om/security/advisories?name=MDKSA-2006:020 - http://secunia.com/advisories/17980 - http://www.vupen.com/english/advisories/2005/2521 - http://www.novell.com/linux/security/advisories/2005_70_ipsec.html
CVE ID: CVE-2005-3733 State: PUBLISHED Published: 2005-11-21T23:00:00 Last Updated: 2024-08-07T23:24:35.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Key Exchange version 1 (IKEv1) implementation in Juniper JUNOS and JUNOSe software for M, T, and J-series routers before release 6.4, and E-series routers before 7-1-0, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to. Additional Analyst Notes: - CV
nclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2410 - http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en - http://securitytracker.com/id?1015203 - http://jvn.jp/niscc/NISCC-273756/index.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/ - http://www.kb.cert.org/vuls/id/226364 - http://secunia.com/advisories/17568 - http://www.securityfocus.com/bid/15402
CVE ID: CVE-2005-3734 State: PUBLISHED Published: 2005-11-22T00:00:00 Last Updated: 2024-08-07T23:24:36.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) thema, (2) username, and (3) usermail parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17649 - http://securityreason.com/securityalert/196 - http://www.phpmyfaq.de/advisory_2005-11-18.php - http://www.osvdb.org/20989 - http://www.securityfocus.com/bid/15504 - http://www.trapkit.de/advisories/TKADV2005
8.php - http://www.osvdb.org/20989 - http://www.securityfocus.com/bid/15504 - http://www.trapkit.de/advisories/TKADV2005-11-004.txt - http://www.vupen.com/english/advisories/2005/2505 - http://www.securityfocus.com/archive/1/417219/30/0/threaded
CVE ID: CVE-2005-3735 State: PUBLISHED Published: 2005-11-22T00:00:00 Last Updated: 2024-08-07T23:24:36.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in shopaddtocart.asp, (2) strpemail parameter in shopprojectlogin.asp, and (3) id parameter in shoptellafriend.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15510 - http://www.osvdb.org/20998 - http://securitytracker.com/id?1015244 - http://www.vupen.com/english/advisories/2005/2506 - http://www.osvdb.org/20997 - http://secunia.c
acker.com/id?1015244 - http://www.vupen.com/english/advisories/2005/2506 - http://www.osvdb.org/20997 - http://secunia.com/advisories/17652 - http://www.osvdb.org/20999
CVE ID: CVE-2005-3736 State: PUBLISHED Published: 2005-11-22T00:00:00 Last Updated: 2024-08-07T23:24:35.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in e-Quick Cart allow remote attackers to inject arbitrary web script or HTML via the (1) strgifttoname parameter in shopgift.asp, (2) strfirstname parameter in shopmaillist.asp, (3) strpid parameter in shopprojectlogin.asp, and (4) Custname parameter in shoptellafriend.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20996 - http://securitytracker.com/id?1015244 - http://www.osvdb.org/20994 - http://www.osvdb.org/20995 - http://www.o
g/20996 - http://securitytracker.com/id?1015244 - http://www.osvdb.org/20994 - http://www.osvdb.org/20995 - http://www.osvdb.org/20993
CVE ID: CVE-2005-3737 State: PUBLISHED Published: 2005-11-22T00:00:00 Last Updated: 2024-08-07T23:24:36.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long CSS style property values. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200511-22.xml - http://www.novell.com/linux/security/advisories/2005_28_sr.html - http://secunia.com/advisories/17778 - http://secunia.com/advisories/17651 - http://www.ubuntulinux.org/usn/usn-217-1 - http://www.securityfocus.com/bid/15
8 - http://secunia.com/advisories/17651 - http://www.ubuntulinux.org/usn/usn-217-1 - http://www.securityfocus.com/bid/15507 - http://secunia.com/advisories/17882 - http://cvs.sourceforge.net/viewcvs.py/inkscape/inkscape/src/style.cpp?r1=1.110&r2=1.110.2.1 - http://www.vupen.com/english/advisories/2005/2511 - http://www.debian.org/security/2005/dsa-916 - http://securityreason.com/securityalert/58 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330894 - http://secunia.com/advisories/17662
CVE ID: CVE-2005-3738 State: PUBLISHED Published: 2005-11-22T11:00:00 Last Updated: 2024-08-07T23:24:36.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: globals.php in Mambo Site Server 4.0.14 and earlier, when register_globals is disabled, allows remote attackers to overwrite variables in the GLOBALS array and conduct various attacks, as demonstrated using the mosConfig_absolute_path parameter to content.html.php for remote PHP file inclusion. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426942/100/0/threaded - http://www.securityfocus.com/bid/15461 - http://secunia.com/advisories/17622 - http://forum.mamboserver.com/
/threaded - http://www.securityfocus.com/bid/15461 - http://secunia.com/advisories/17622 - http://forum.mamboserver.com/showthread.php?t=66154 - http://securitytracker.com/id?1015258 - http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0520.html - http://www.securityfocus.com/archive/1/427196/100/0/threaded - http://www.securityfocus.com/archive/1/417215 - http://www.vupen.com/english/advisories/2005/2473
CVE ID: CVE-2005-3739 State: PUBLISHED Published: 2005-11-22T11:00:00 Last Updated: 2024-08-07T23:24:36.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in subheader.php in PHP-Fusion 6.00.206 and earlier allows remote attackers to obtain the full path via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/lists/bugtraq/2005/Nov/0237.html - http://myblog.it-security23.net/advisories/advisory-6.txt - http://www.osvdb.org/20990 - http://seclists.org/lists/bugtraq/2005/Nov/0232.html - http://www.vupen.com/english/advisories/2005/2504 - http://secunia.com/advisories/17664
CVE ID: CVE-2005-3740 State: PUBLISHED Published: 2005-11-22T11:00:00 Last Updated: 2024-08-07T23:24:36.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHP-Fusion 6.00.206 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the forum_id parameter to options.php or (2) lastvisited parameter to viewforum.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20992 - http://seclists.org/lists/bugtraq/2005/Nov/0237.html - http://myblog.it-security23.net/advisories/advisory-6.txt - http://seclists.org/lists/bugtraq/2005/Nov/0232.html - http://www.securityfocus.com/bid/15502 - htt
ies/advisory-6.txt - http://seclists.org/lists/bugtraq/2005/Nov/0232.html - http://www.securityfocus.com/bid/15502 - http://www.osvdb.org/20991 - http://www.vupen.com/english/advisories/2005/2504 - http://secunia.com/advisories/17664
CVE ID: CVE-2005-3741 State: PUBLISHED Published: 2005-11-22T11:00:00Z Last Updated: 2024-09-16T20:42:14.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Almond Classifieds does not properly verify the password, which allows attackers to bypass access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15505
CVE ID: CVE-2005-3742 State: PUBLISHED Published: 2005-11-22T11:00:00 Last Updated: 2024-08-07T23:24:35.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in popup.php in Advanced Poll 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the poll_ident parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17669 - http://securitytracker.com/id?1015245 - http://www.securityfocus.com/bid/15506 - http://www.osvdb.org/21006 - http://www.vupen.com/english/advisories/2005/2524
CVE ID: CVE-2005-3743 State: PUBLISHED Published: 2005-11-22T11:00:00 Last Updated: 2024-08-07T23:24:35.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in results.php in SimplePoll allows remote attackers to execute arbitrary SQL commands via the pollid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15508 - http://www.osvdb.org/21035
CVE ID: CVE-2005-3744 State: PUBLISHED Published: 2005-11-22T11:00:00 Last Updated: 2024-08-07T23:24:36.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in phpComasy 0.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: an examination of the 0.7.5 source code suggests that there is no id parameter being handled directly by index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15511 - http://pridels0.blogspot.com/2005/11/phpcomasy-id-sql-injection.html - http://www.vupen.com/english/advisories/2005/2507 - http://www.osvdb.org/20984 -
5/11/phpcomasy-id-sql-injection.html - http://www.vupen.com/english/advisories/2005/2507 - http://www.osvdb.org/20984 - http://secunia.com/advisories/17660
CVE ID: CVE-2005-3745 State: PUBLISHED Published: 2005-11-22T11:00:00 Last Updated: 2024-08-07T23:24:36.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2006-0161.html - http://www.vupen.com/english/advisories/2005/2525 - http://www.osvdb.org/21021 - http://www.securityfocus.com/bid/15512 - http://www.hac
.com/english/advisories/2005/2525 - http://www.osvdb.org/21021 - http://www.securityfocus.com/bid/15512 - http://www.hacktics.com/AdvStrutsNov05.html - http://www.securityfocus.com/archive/1/417296/30/0/threaded - http://www.redhat.com/support/errata/RHSA-2006-0157.html - http://securitytracker.com/id?1015257 - http://securityreason.com/securityalert/197 - http://secunia.com/advisories/17677 - http://secunia.com/advisories/18341 - https://lists.apache.org/thread.html/r02c2d634fa74209d941c90f9a4cd36a6f12366ca65f9b90446ff2de3%40%3Cissues.struts.apache.org%3E - https://lists.apache.org/thread.html/rf482c101a88445d73cc2e89dbf7f16ae00a4aa79a544a1e72b2326db%40%3Cissues.struts.apache.org%3E
CVE ID: CVE-2005-3746 State: PUBLISHED Published: 2005-11-22T11:00:00 Last Updated: 2024-08-07T23:24:36.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in thread.php in APBoard allows remote attackers to execute arbitrary SQL commands via the start parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21289 - http://securityreason.com/securityalert/198 - http://www.securityfocus.com/bid/15513 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23200 - http://www.securityfocus.com/archive/1/417298
CVE ID: CVE-2005-3747 State: PUBLISHED Published: 2005-11-22T11:00:00 Last Updated: 2024-08-07T23:24:35.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash ("%5C") characters. NOTE: this might be the same issue as CVE-2006-2758. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=372086&group_id=7322 - http://www.securityfocus.com/archive/1/450315/100/0/threaded - http://www.vupen.com/english/advisories/2005/2515 - http://www.securityfoc