Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-0224 State: PUBLISHED Published: 2004-03-16T05:00:00 Last Updated: 2024-08-08T00:10:03.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code "when Unicode character is out of BMP range." Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=5767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15434 - http://secunia.com/advisories/11087/ - http://www.securityfocus.com/bid/9845
CVE ID: CVE-2004-0226 State: PUBLISHED Published: 2004-05-05T04:00:00 Last Updated: 2024-08-08T00:10:03.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2004_12_mc.html - http://security.gentoo.org/glsa/glsa-200405-21.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/16016 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:039 - http://www.debian.org/security/2004/dsa-497 - http://www.redhat.com/support/err
ecurity/advisories?name=MDKSA-2004:039 - http://www.debian.org/security/2004/dsa-497 - http://www.redhat.com/support/errata/RHSA-2004-172.html
CVE ID: CVE-2004-0227 State: PUBLISHED Published: 2004-05-12T04:00:00 Last Updated: 2024-08-08T00:10:03.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the zms script in ZoneMinder before 1.19.2 may allow a remote attacker to execute arbitrary code via a long query string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16136 - http://www.zoneminder.com/index.php?id=20&type=0&backPID=20&tt_news=29 - http://www.securityfocus.com/bid/10340
CVE ID: CVE-2004-0228 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T00:10:03.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the cpufreq proc handler (cpufreq_procctl) in Linux kernel 2.6 allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15951 - http://fedoranews.org/updates/FEDORA-2004-111.shtml - http://www.novell.com/linux/security/advisories/2004_10_kernel.html - http://secunia.com/advisories/11491 - http://secunia.com/advisories/11683 - http://secunia.com/advisories/11486 -
tml - http://secunia.com/advisories/11491 - http://secunia.com/advisories/11683 - http://secunia.com/advisories/11486 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:050 - http://secunia.com/advisories/11429 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852 - http://security.gentoo.org/glsa/glsa-200407-02.xml
CVE ID: CVE-2004-0229 State: PUBLISHED Published: 2004-05-05T04:00:00 Last Updated: 2024-08-08T00:10:03.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: The framebuffer driver in Linux kernel 2.6.x does not properly use the fb_copy_cmap function, with unknown impact. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15974 - http://www.novell.com/linux/security/advisories/2004_10_kernel.html - http://www.securityfocus.com/bid/10211 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:037 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852 - http://security.gentoo.org/glsa/glsa-200407-02.
037 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852 - http://security.gentoo.org/glsa/glsa-200407-02.xml
CVE ID: CVE-2004-0230 State: PUBLISHED Published: 2004-05-05T04:00:00 Last Updated: 2024-08-08T00:10:03.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2689 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ade
oval%3Aorg.mitre.oval%3Adef%3A2689 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3508 - http://www.us-cert.gov/cas/techalerts/TA04-111A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5711 - http://marc.info/?l=bugtraq&m=108302060014745&w=2 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.uniras.gov.uk/vuls/2004/236929/index.htm - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064 - http://secunia.com/advisories/11440 - http://kb.juniper.net/JSA10638 - https://kc.mcafee.com/corporate/index?page=content&id=SB10053 - http://www.oracle.com/technetwor
.juniper.net/JSA10638 - https://kc.mcafee.com/corporate/index?page=content&id=SB10053 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://www.kb.cert.org/vuls/id/415294 - http://marc.info/?l=bugtraq&m=108506952116653&w=2 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.9/SCOSA-2005.9.txt - ftp://patches.sgi.com/support/free/security/advisories/20040403-01-A.asc - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt - http:
lic/707/cisco-sa-20040420-tcp-ios.shtml - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt - http://www.securityfocus.com/bid/10183 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4791 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A270 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15886 - http://www.osvdb.org/4030 - http://secunia.com/advisories/22341 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc - http://www.vupen.com/english/advisories/2006/3983 - http://secunia.com/adviso
ity/advisories/NetBSD-SA2004-006.txt.asc - http://www.vupen.com/english/advisories/2006/3983 - http://secunia.com/advisories/11458
CVE ID: CVE-2004-0231 State: PUBLISHED Published: 2004-05-05T04:00:00 Last Updated: 2024-08-08T00:10:03.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations." Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2004_12_mc.html - http://security.gentoo.org/glsa/glsa-200405-21.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2004:039 - http://www.debian.org/security/2004/dsa-497 - http://www.redhat.com/support/errata/RHSA-2004-172.html - https://exchange.xforce.ibmcl
bian.org/security/2004/dsa-497 - http://www.redhat.com/support/errata/RHSA-2004-172.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16020
CVE ID: CVE-2004-0232 State: PUBLISHED Published: 2004-05-05T04:00:00 Last Updated: 2024-08-08T00:10:03.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2004_12_mc.html - http://security.gentoo.org/glsa/glsa-200405-21.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/16021 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:039 - http://www.debian.org/security/2004/dsa-497 - http://www.redhat.co
andriva.com/security/advisories?name=MDKSA-2004:039 - http://www.debian.org/security/2004/dsa-497 - http://www.redhat.com/support/errata/RHSA-2004-172.html
CVE ID: CVE-2004-0233 State: PUBLISHED Published: 2004-05-05T04:00:00 Last Updated: 2024-08-08T00:10:03.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2004:031 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000752.1-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15904 - http://www.redhat.com
cument.do?assetkey=1-77-1000752.1-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15904 - http://www.redhat.com/support/errata/RHSA-2004-174.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404389 - http://security.gentoo.org/glsa/glsa-200405-05.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10115 - http://www.securityfocus.com/bid/10178 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A979 - http://www.redhat.com/support/errata/RHSA-2004-175.html
CVE ID: CVE-2004-0234 State: PUBLISHED Published: 2004-05-05T04:00:00 Last Updated: 2024-08-08T00:10:03.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015866 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840 - http://www.osvdb.org/5753 - http
ker.com/id?1015866 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840 - http://www.osvdb.org/5753 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A977 - http://www.redhat.com/archives/fedora-announce-list/2004-May/msg00005.html - http://archives.neohapsis.com/archives/bugtraq/2006-04/0059.html - http://www.securityfocus.com/bid/10243 - http://www.vupen.com/english/advisories/2006/1220 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020776.html - http://secunia.com/advisories/19514 - http://www.osvdb.org/5754 - http://www.redhat.com/support/errata/RHSA-2004-179.html - http://www.guay-leroux.com/projects/barracuda-advisory-L
754 - http://www.redhat.com/support/errata/RHSA-2004-179.html - http://www.guay-leroux.com/projects/barracuda-advisory-LHA.txt - https://bugzilla.fedora.us/show_bug.cgi?id=1833 - http://www.debian.org/security/2004/dsa-515 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9881 - http://marc.info/?l=bugtraq&m=108422737918885&w=2 - http://security.gentoo.org/glsa/glsa-200405-02.xml - http://www.redhat.com/support/errata/RHSA-2004-178.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16012 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020778.html
CVE ID: CVE-2004-0235 State: PUBLISHED Published: 2004-05-05T04:00:00 Last Updated: 2024-08-08T00:10:03.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path"). Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840 - http://www.redhat.com/archives/fedora-announce-list/2004-May/msg00005.html - http://www.securityfocus.com/bid/10243 - http://lists.grok.org.uk
archives/fedora-announce-list/2004-May/msg00005.html - http://www.securityfocus.com/bid/10243 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020776.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16013 - http://www.redhat.com/support/errata/RHSA-2004-179.html - https://bugzilla.fedora.us/show_bug.cgi?id=1833 - http://www.debian.org/security/2004/dsa-515 - http://marc.info/?l=bugtraq&m=108422737918885&w=2 - http://security.gentoo.org/glsa/glsa-200405-02.xml - http://www.redhat.com/support/errata/RHSA-2004-178.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A978 - https://oval.cisecurity.org/repository/search/definition/ov
sitory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A978 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10409
CVE ID: CVE-2004-0236 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp in thePHOTOtool allows remote attackers to gain unauthorized access via the password field. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107576894019530&w=2 - http://securitytracker.com/alerts/2004/Feb/1008906.html - http://www.securityfocus.com/bid/9884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15007 - http://www.osvdb.org/6727
CVE ID: CVE-2004-0237 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Aprox PHP Portal allows remote attackers to read arbitrary files via a full pathname in the show parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15014 - http://securitytracker.com/id?1008915 - http://www.osvdb.org/10859 - http://www.securityfocus.com/bid/9540 - http://marc.info/?l=bugtraq&m=107577555527321&w=2
CVE ID: CVE-2004-0238 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Overkill (0verkill) 0.15pre3 might allow local users to execute arbitrary code in the client via a long HOME environment variable in the (1) load_cfg and (2) save_cfg functions; possibly allow remote attackers to execute arbitrary code via long strings to (3) the send_message function; and, in the server, via (4) the parse_command_line function. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016579.html - http://marc
gram Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016579.html - http://marc.info/?l=bugtraq&m=107577335424509&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15000 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14999 - http://www.securiteam.com/securitynews/5AP010KC0C.html - http://www.securityfocus.com/bid/9550
CVE ID: CVE-2004-0239 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unauthorized access via the photo variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15008 - http://www.securiteam.com/securitynews/5KP010UC0W.html - http://www.securityfocus.com/bid/9557 - http://marc.info/?l=bugtraq&m=107582512023998&w=2
CVE ID: CVE-2004-0240 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in X-Cart 3.4.3 allows remote attackers to view arbitrary files via a .. (dot dot) in the shop_closed_file argument to auth.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15033 - http://marc.info/?l=bugtraq&m=107582648326448&w=2
CVE ID: CVE-2004-0241 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (2) general.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15034 - http://marc.info/?l=bugtraq&m=107582648326448&w=2 - http://www.securityfocus.com/bid/9560
CVE ID: CVE-2004-0242 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: X-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with (1) phpinfo command or (2) perlinfo command. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107582648326448&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15036 - http://www.securityfocus.com/bid/9563
CVE ID: CVE-2004-0243 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correct, which allows remote attackers to guess the password via brute force methods. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2004-02/0313.html - http://marc.info/?l=bugtraq&m=107583269206044&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15172
CVE ID: CVE-2004-0244 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or OSM module allow local users to cause a denial of service (hang or reset) by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10780 - http://www.securityfocus.com/bid/9562 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15013 - http://www.cisco.com/warp/
www.securityfocus.com/bid/9562 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15013 - http://www.cisco.com/warp/public/707/cisco-sa-20040203-cat6k.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5828 - http://www.kb.cert.org/vuls/id/810062
CVE ID: CVE-2004-0245 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Crossing 4.x and 5.x allows remote attackers to cause a denial of service (crash) by sending a HTTP POST request with a large or negative Content-Length, which causes an integer divide-by-zero. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15022 - http://marc.info/?l=bugtraq&m=107586518120516&w=2 - http://www.securityfocus.com/bid/9576
CVE ID: CVE-2004-0246 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in (1) fonctions.lib.php, (2) derniers_commentaires.php, and (3) admin.php in Les Commentaires 2.0 allow remote attackers to execute arbitrary PHP code via the rep parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10768/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/15010 - http://www.securityfocus.com/bid/9536 - http://marc.info/?l=bugtraq&m=107584083719763&w=2
CVE ID: CVE-2004-0247 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service (crash via exception) via a UDP packet with a length field that is greater than the actual data length, which causes Chaser to read unexpected memory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15031 - http://marc.info/?l=bugtraq&m=107584109420084&w=2 - http://www.securityfocus.com/bid/9567
CVE ID: CVE-2004-0248 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability (XSS) in PHPX 3.2.3 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into (1) keywords argument of main.inc.php, (2) body argument of help.inc.php, or (3) the subject field in Personal Messages and Forum. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15051 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15050 - http://www.securityfocus.com/bid/9569 - http://se
s/15051 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15050 - http://www.securityfocus.com/bid/9569 - http://secunia.com/advisories/10797/ - http://marc.info/?l=bugtraq&m=107586932324901&w=2
CVE ID: CVE-2004-0249 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable to reference another userID. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15052 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15512 - http://www.securityfocus.com/bid/9569 - http://secunia.com/advisories/10797/ - http://archives.neohapsis.com/archives/bugtraq/2004-03/0154.html - http://marc.info/?l=bugtraq&m=107586932324901&w=2
CVE ID: CVE-2004-0250 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the product parameter in showproduct.php or (2) the cat parameter in showcat.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15008 - http://marc.info/?l=bugtraq&m=107593114909696&w=2 - http://www.securityfocus.com/bid/9557 - http://www.zone-h.org/en/advisories/read/id=3864/
CVE ID: CVE-2004-0251 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in rxgoogle.cgi allows remote attackers to execute arbitrary script as other users via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107594183924958&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15043 - http://www.securityfocus.com/bid/9575