Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
sories/18064 - http://secunia.com/advisories/15546 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1508 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1489 - http://www.securityfocus.com/bid/13799 - http://www.kb.cert.org/vuls/id/887861 - http://marc.info/?l=bugtraq&m=111746394106172&w=2 - http://www.securityfocus.com/archive/1/417326/30/0/threaded - http://www.us-cert.gov/cas/techalerts/TA05-347A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054 - http://marc.info/?l=bugtraq&m=111755552306013&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre
//marc.info/?l=bugtraq&m=111755552306013&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1303 - http://www.computerterrorism.com/research/ie/ct21-11-2005 - http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf - http://secunia.com/advisories/15368 - http://www.vupen.com/english/advisories/2005/2909 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1299 - http://secunia.com/advisories/18311 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A722 - http://www.vupen.com/english/advisories/2005/2867 - http://www.vupen.com/english/advisories/2005/2509 - https://oval.cise
ttp://www.vupen.com/english/advisories/2005/2867 - http://www.vupen.com/english/advisories/2005/2509 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1091 - http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420 - http://securitytracker.com/id?1015251
CVE ID: CVE-2005-1791 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:56.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 SP2 (6.0.2900.2180) crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address. NOTE: if there is not an exploit scenario in which an attacker can trigger this behavior, then perhaps this issue should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13798 - http://marc.info/?l=bugtraq&m=111746303509720&w=2
CVE ID: CVE-2005-1792 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:56.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Windows Management Instrumentation (WMI) service allows attackers to cause a denial of service (memory consumption and crash) by creating security contexts more quickly than they can be cleared from the RPC cache. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13801 - http://www.osvdb.org/13020 - http://support.microsoft.com/kb/890196 - http://www.networksecurity.fi/advisories/windows-wmi-rpc.html
CVE ID: CVE-2005-1793 State: PUBLISHED Published: 2005-06-01T04:00:00Z Last Updated: 2024-09-17T02:53:21.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: User32.DLL in Microsoft Windows 98SE, and possibly other operating systems, allows local and remote attackers to cause a denial of service (crash) via an icon (.ico) bitmap file with large width and height values. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/399207 - http://www.securityfocus.com/archive/1/399228
CVE ID: CVE-2005-1794 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:56.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15605/ - http://www.oxid.it/downloads/rdp-gbu.pdf - http://www.securityfocus.com/bid/13818 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 - https://oval.cisecurity.org/rep
.securityfocus.com/bid/13818 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12441
CVE ID: CVE-2005-1795 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:56.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: The filecopy function in misc.c in Clam AntiVirus (ClamAV) before 0.85, on Mac OS, allows remote attackers to execute arbitrary code via a virus in a filename that contains shell metacharacters, which are not properly handled when HFS permissions prevent the file from being deleted and ditto is invoked. Additional Analyst Notes: - CVE Program Container: References: - http://www.sentinelchicken.com/advisories/clamav - http://securitytracker.com/id?1014070
CVE ID: CVE-2005-1796 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:56.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the curses_msg function in the Ncurses interface (ec_curses.c) for Ettercap before 0.7.3 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014084 - http://secunia.com/advisories/15535 - http://www.debian.org/security/2005/dsa-749 - http://secunia.com/advisories/15664 - http://www.vupen.com/english/advisories/2005/0670 - http://ettercap.sourceforge.net/history.php - http://www.gentoo.org/security/en/gl
en.com/english/advisories/2005/0670 - http://ettercap.sourceforge.net/history.php - http://www.gentoo.org/security/en/glsa/glsa-200506-07.xml - http://www.securityfocus.com/bid/13820 - http://secunia.com/advisories/16000
CVE ID: CVE-2005-1797 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:57.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: The design of Advanced Encryption Standard (AES), aka Rijndael, allows remote attackers to recover AES keys via timing attacks on S-box lookups, which are difficult to perform in constant time in AES implementations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13785 - http://cr.yp.to/antiforgery/cachetiming-20050414.pdf
CVE ID: CVE-2005-1798 State: PUBLISHED Published: 2005-06-01T04:00:00Z Last Updated: 2024-09-16T19:40:33.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ServersCheck Monitoring Software 5.9.0 to 5.10.0 allows remote attackers to read arbitrary files via .. (dot dot) sequences in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.rgod.altervista.org/hacking/news/serverscheck.html - http://securitytracker.com/id?1014075
CVE ID: CVE-2005-1799 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:56.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.5.7 and WikiLite (FSWikiLite) .10 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15538 - http://www.securityfocus.com/bid/13824
CVE ID: CVE-2005-1800 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:56.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the term parameter in a view or ViewTerm action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/034354.html - http://www.securityfocus.com/bid/13796
CVE ID: CVE-2005-1801 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:56.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vCard viewer in Nokia 9500 allows attackers to cause a denial of service (crash) via a vCard with a long Name field, which causes the crash when the user views it. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13784 - http://www.securityfocus.com/infocus/1836
CVE ID: CVE-2005-1802 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:56.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortel VPN Router (aka Contivity) allows remote attackers to cause a denial of service (crash) via an IPsec IKE packet with a malformed ISAKMP header. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014068 - http://www.securityfocus.com/bid/13792 - http://www.nta-monitor.com/news/vpn-flaws/nortel/vpn-router-dos/ - http://www.securityfocus.com/archive/1/399423
CVE ID: CVE-2005-1803 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:56.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to inject arbitrary web script or HTML via the language parameter to (1) admin.php, or (2) powerpack_f.php, (3) the sitename parameter to sdv_infos.php, (4) the categories parameter to faq.php, (5) the lettre parameter to the glossaire module, (6) the title parameter to reviews.php, or (7) the image_subject parameter to reply.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.or
age_subject parameter to reply.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16464 - http://securitytracker.com/id?1014073 - http://www.npds.org/download.php?op=geninfo&did=115 - http://www.osvdb.org/16922
CVE ID: CVE-2005-1804 State: PUBLISHED Published: 2005-06-01T04:00:00Z Last Updated: 2024-09-16T16:53:55.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitrary SQL commands via the (1) terme parameter in the glossaire module (glossaire.php) or (2) query parameter to links.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014073 - http://www.npds.org/download.php?op=geninfo&did=115
CVE ID: CVE-2005-1805 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:56.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp in an unknown product by Online Solutions for Educators (OS4E) allows remote attackers to execute arbitrary SQL commands via the password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13804 - http://securitytracker.com/id?1014072 - http://www.under9round.com/os4e.txt - http://www.vupen.com/english/advisories/2005/0645
CVE ID: CVE-2005-1806 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:57.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in PeerCast 0.1211 and earlier allows remote attackers to execute arbitrary code via format strings in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200506-15.xml - http://secunia.com/advisories/15753 - http://marc.info/?l=bugtraq&m=111746603629979&w=2 - http://www.gulftech.org/?node=research&article_id=00077-05282005 - http://www.vupen.com/english/advisories/2005/0651 - http://secunia.com/advisories/15536 - http://www.peercast.
5282005 - http://www.vupen.com/english/advisories/2005/0651 - http://secunia.com/advisories/15536 - http://www.peercast.org/forum/viewtopic.php?p=11596
CVE ID: CVE-2005-1807 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:57.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Data function in class.smtp.php in PHPMailer 1.7.2 and earlier allows remote attackers to cause a denial of service (infinite loop leading to memory and CPU consumption) via a long header field. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2242 - http://www.vupen.com/english/advisories/2006/0448 - http://securitytracker.com/id?1014069 - http://www.cybsec.com/vuln/PHPMailer-DOS.pdf - http://seclists.org/lists/bugtraq/2005/May/0337.html - http://www.securityfoc
://www.cybsec.com/vuln/PHPMailer-DOS.pdf - http://seclists.org/lists/bugtraq/2005/May/0337.html - http://www.securityfocus.com/bid/13805 - http://secunia.com/advisories/25726 - http://secunia.com/advisories/15543 - http://sourceforge.net/project/shownotes.php?release_id=341210&group_id=26031 - http://secunia.com/advisories/18732
CVE ID: CVE-2005-1808 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:57.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefly Studios Stronghold 2 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large size value for the nickname, which causes a memory allocation failure and generates an exception. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/strong2boom-adv.txt - http://marc.info/?l=bugtraq&m=111747562806999&w=2 - http://secunia.com/advisories/15556
CVE ID: CVE-2005-1809 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:57.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sony Ericsson P900 Beamer allows remote attackers to cause a denial of service (panic) via an obexftp session with a long filename in an OBEX File Transfer or OBEX Object Push. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/infocus/1836 - http://www.securityfocus.com/bid/13872
CVE ID: CVE-2005-1810 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:57.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands via the $cat_ID variable, as demonstrated using the cat parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=94512 - http://marc.info/?l=bugtraq&m=111817436619067&w=2 - http://secunia.com/advisories/15517 - http://www.osvdb.org/16905 - http://security.gentoo.org/glsa/glsa-200506-04.xml - http://www.securityfocus.com
s/15517 - http://www.osvdb.org/16905 - http://security.gentoo.org/glsa/glsa-200506-04.xml - http://www.securityfocus.com/bid/13809 - http://wordpress.org/development/2005/05/security-update/
CVE ID: CVE-2005-1811 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:57.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in usercp.php for MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via the website field in a user profile. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014081 - http://seclists.org/lists/bugtraq/2005/May/0338.html - http://secunia.com/advisories/15552 - http://www.securityfocus.com/bid/13819
CVE ID: CVE-2005-1812 State: PUBLISHED Published: 2005-06-01T04:00:00Z Last Updated: 2024-09-16T20:42:53.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code via a long (1) filename or (2) transfer mode string in a Read Request (RRQ) or Write Request (WRQ) packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15539 - http://www.securityfocus.com/bid/13821 - http://securitytracker.com/id?1014079 - http://www.security.org.sg/vuln/tftp2000-1001.html
CVE ID: CVE-2005-1813 State: PUBLISHED Published: 2005-06-01T04:00:00Z Last Updated: 2024-09-16T23:45:59.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing (1) "../" (dot dot slash) or (2) "..\" (dot dot backslash) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15539 - http://www.securityfocus.com/bid/13821 - http://securitytracker.com/id?1014079 - http://www.security.org.sg/vuln/tftp2000-1001.html
CVE ID: CVE-2005-1814 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:57.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in PicoWebServer 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13807 - http://secunia.com/advisories/15541 - http://marc.info/?l=bugtraq&m=111746551802380&w=2
CVE ID: CVE-2005-1815 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:57.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of service and possibly execute arbitrary code via (1) an FTP command with a long argument to FTPD (ftpdw.exe) or (2) a large amount of data to LPD (Lpdw.exe). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13788 - http://www.securityfocus.com/bid/13790 - http://secunia.com/advisories/15557 - http://connectivity.hummingbird.com/support/nc/exceed/lpdw_advisory.htm
id/13790 - http://secunia.com/advisories/15557 - http://connectivity.hummingbird.com/support/nc/exceed/lpdw_advisory.html - http://connectivity.hummingbird.com/support/nc/exceed/ftpd_advisory.html?cks=y
CVE ID: CVE-2005-1816 State: PUBLISHED Published: 2005-06-01T04:00:00Z Last Updated: 2024-09-16T20:36:57.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Power Board (IPB) 1.0 through 2.0.4 allows non-root admins to add themselves or other users to the root admin group via the "Move users in this group to" screen. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15545 - http://www.securityfocus.com/bid/13797 - http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0635.html
CVE ID: CVE-2005-1817 State: PUBLISHED Published: 2005-06-01T04:00:00Z Last Updated: 2024-09-16T17:44:00.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Power Board (IPB) 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to index.php with modified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13802
CVE ID: CVE-2005-1818 State: PUBLISHED Published: 2005-06-01T04:00:00Z Last Updated: 2024-09-16T22:45:32.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in NewLife Blogger before 3.3.1 allow remote attackers to execute arbitrary SQL commands via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13815 - http://www.sevengraff.com/index.php - http://secunia.com/advisories/15523
CVE ID: CVE-2005-1819 State: PUBLISHED Published: 2005-06-01T04:00:00Z Last Updated: 2024-09-16T23:21:55.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in NikoSoft WebMail before 0.11.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15518 - http://www.nikosoft.net/nswm/
CVE ID: CVE-2005-1820 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:57.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the preg_replace function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13823 - http://www.securiteam.com/exploits/5KP0V0AFPA.html - http://pandora.sapzil.info/text/notify/20050123.zb41advisory.php
CVE ID: CVE-2005-1821 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:57.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in pdl_header.inc.php in PowerDownload 3.0.2 and 3.0.3 allows remote attackers to execute arbitrary PHP code via the incdir parameter to downloads.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13822 - http://marc.info/?l=bugtraq&m=111755754126095&w=2 - http://secunia.com/advisories/15537 - http://www.soulblack.com.ar/repo/papers/advisory/powerdownload_advisory.txt - http://securitytracker.com/id?1014078
CVE ID: CVE-2005-1822 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:57.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) printable parameter to home.php, (3) productid or (4) mode parameter to product.php, (5) id parameter to error_message.php, (6) section parameter to help.php, (7) mode parameter to orders.php, (8) mode parameter to register.php, (9) mode parameter to search.php, or the (10) gcid or (11) gcindex parameter to giftcert.php. Additional Analyst Notes: - CVE Program Container: References: -
he (10) gcid or (11) gcindex parameter to giftcert.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014077 - http://marc.info/?l=bugtraq&m=111748583101076&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20773 - http://www.securityfocus.com/bid/13817 - http://secunia.com/advisories/15555
CVE ID: CVE-2005-1823 State: PUBLISHED Published: 2005-06-01T04:00:00 Last Updated: 2024-08-07T22:06:57.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) cat or (2) printable parameter to home.php, (3) productid or (4) mode parameter to product.php, (5) id parameter to error_message.php, (6) section parameter to help.php, (7) mode parameter to orders.php, (8) mode parameter to register.php, (9) mode parameter to search.php, or the (10) gcid or (11) gcindex parameter to giftcert.php. Additional Analyst Notes: - CVE Program Contai
o search.php, or the (10) gcid or (11) gcindex parameter to giftcert.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014077 - http://marc.info/?l=bugtraq&m=111748583101076&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20774 - http://www.securityfocus.com/bid/13817 - http://secunia.com/advisories/15555
CVE ID: CVE-2005-1824 State: PUBLISHED Published: 2005-06-02T04:00:00 Last Updated: 2024-08-07T22:06:57.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sql_escape_string function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "\" (backslash) character, which is used as an escape character and makes the module vulnerable to SQL injection attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200506-02.xml - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=308031