Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ich a Microsoft Foundation Classes (MFC) static library returns invalid values under heavy load. As such, this might not be a vulnerability in Trend Micro's product. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18038 - http://securityreason.com/securityalert/257 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039978.html - http://securitytracker.com/id?1015358 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039972.html - http://www.osvdb.org/21772 - http://www.osvdb.org/21771 - http://www.idefense.com/application/poi/display?id=353&type=vulnerabilities - http://securityreason.com/securityalert/256 - http:
w.idefense.com/application/poi/display?id=353&type=vulnerabilities - http://securityreason.com/securityalert/256 - http://www.securityfocus.com/bid/15865 - http://www.securityfocus.com/bid/15866 - http://www.vupen.com/english/advisories/2005/2907
CVE ID: CVE-2005-1930 State: PUBLISHED Published: 2005-12-14T20:00:00 Last Updated: 2024-08-07T22:06:57.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Crystal Report component (rptserver.asp) in Trend Micro ServerProtect Management Console 5.58, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, and possibly earlier versions, allows remote attackers to read arbitrary files via the IMAGE parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18038 - http://securitytracker.com/id?1015358 - http://www.securityfocus.com/bid/15867 - http://www.idefense.com/application/po
http://securitytracker.com/id?1015358 - http://www.securityfocus.com/bid/15867 - http://www.idefense.com/application/poi/display?id=352&type=vulnerabilities - http://www.osvdb.org/21770 - http://securityreason.com/securityalert/258 - http://www.vupen.com/english/advisories/2005/2907
CVE ID: CVE-2005-1931 State: PUBLISHED Published: 2005-06-30T04:00:00 Last Updated: 2024-08-07T22:06:57.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: GoodTech SMTP Server 5.14 allows remote attackers to cause a denial of service (application crash) via a RCPT TO command with an invalid argument, as demonstrated using an "A" character. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15623 - http://marc.info/?l=bugtraq&m=111817606013776&w=2
CVE ID: CVE-2005-1932 State: PUBLISHED Published: 2005-06-30T04:00:00Z Last Updated: 2024-09-17T03:59:07.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lpanel 1.59 and earlier, and other versions before 1.597, allows remote authenticated users to modify certain critical variables and (1) modify DNS settings for arbitrary domains via the domain parameter to diagnose.php, (2) close, open, or respond to arbitrary support tickets via the close, open, or pid parameter to view_ticket.php, (3) obtain sensitive information on arbitrary invoices via the inv parameter to viewreceipt.php, or (4) modify domain information for arbitrary domains via the editdomain parameter to domains.php
r to viewreceipt.php, or (4) modify domain information for arbitrary domains via the editdomain parameter to domains.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13869 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034419.html - http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034417.html - http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034418.html - http://www.lpanel.net/changelog.php - http://secunia.com/advisories/15589/ - http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034415.html - http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034416.html - http://lists.grok.or
/2005-June/034415.html - http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034416.html - http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034414.html
CVE ID: CVE-2005-1933 State: PUBLISHED Published: 2005-06-09T04:00:00 Last Updated: 2024-08-07T22:06:57.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dashboard in Apple Mac OS X Tiger 10.4 allows attackers to execute arbitrary commands by overriding the behavior of system widgets via a user widget with the same bundle identifier (CFBundleIdentifier), a different vulnerability than CVE-2005-1474. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/983429 - http://www1.cs.columbia.edu/~aaron/files/widgets/
CVE ID: CVE-2005-1934 State: PUBLISHED Published: 2005-06-09T04:00:00 Last Updated: 2024-08-07T22:06:57.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gaim before 1.3.1 allows remote attackers to cause a denial of service (crash) via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an integer signedness error. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A263 - http://www.securityfocus.com/bid/13932 - http://www.securityfocus.com/archive/1/426078/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2005:099 - h
.securityfocus.com/archive/1/426078/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2005:099 - http://www.redhat.com/support/errata/RHSA-2005-518.html - http://www.debian.org/security/2005/dsa-734 - http://sourceforge.net/tracker/index.php?func=detail&aid=1205290&group_id=235&atid=100235 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10368 - http://security.gentoo.org/glsa/glsa-200506-11.xml - http://www.novell.com/linux/security/advisories/2005_36_sudo.html
CVE ID: CVE-2005-1935 State: PUBLISHED Published: 2005-06-09T04:00:00 Last Updated: 2024-08-07T22:06:57.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library (MSASN1.DLL) allows remote attackers to execute arbitrary code via nested constructed bit strings, which leads to a realloc of a non-null pointer and causes the function to overwrite previously freed memory, as demonstrated using a SPNEGO token with a constructed bit string during HTTP authentication, and a different vulnerability than CVE-2003-0818. NOTE: the researcher has claimed that MS:MS04-007 fixes this issue. Additional Analyst Notes:
bility than CVE-2003-0818. NOTE: the researcher has claimed that MS:MS04-007 fixes this issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20870 - http://www.phreedom.org/solar/exploits/msasn1-bitstring/
CVE ID: CVE-2005-1936 State: PUBLISHED Published: 2005-06-12T04:00:00 Last Updated: 2024-08-07T22:06:57.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the web server for the ESS/ Network Controller for Xerox Document Centre 240 through 555 running System Software 27.18.017 and earlier allows attackers to "gain unauthorized access." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19661 - http://www.securityfocus.com/bid/12783 - http://www.xerox.com/downloads/usa/en/c/cert_XRX05_003.pdf - http://www.osvdb.org/14659 - http://www.vupen.com/english/advisories/2005/0255 - http://secunia.
/c/cert_XRX05_003.pdf - http://www.osvdb.org/14659 - http://www.vupen.com/english/advisories/2005/0255 - http://secunia.com/advisories/14556
CVE ID: CVE-2005-1937 State: PUBLISHED Published: 2005-06-13T04:00:00 Last Updated: 2024-08-07T22:06:57.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: A regression error in Firefox 1.0.3 and Mozilla 1.7.7 allows remote attackers to inject arbitrary Javascript from one page into the frameset of another site, aka the frame injection spoofing vulnerability, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2004-0718. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-810 - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://www.debian.org/security/2005/dsa-777 - htt
10 - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://www.debian.org/security/2005/dsa-777 - https://bugzilla.mozilla.org/show_bug.cgi?id=296850 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10633 - http://www.redhat.com/support/errata/RHSA-2005-587.html - http://www.mozilla.org/security/announce/mfsa2005-51.html - http://www.vupen.com/english/advisories/2005/1075 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A759 - http://www.novell.com/linux/security/advisories/2005_45_mozilla.html - http://www.securityfocus.com/bid/14242
ef%3A759 - http://www.novell.com/linux/security/advisories/2005_45_mozilla.html - http://www.securityfocus.com/bid/14242 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100007 - http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A637 - http://www.redhat.com/support/errata/RHSA-2005-586.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101952-1 - http://secunia.com/advisories/15601
CVE ID: CVE-2005-1938 State: REJECTED Published: 2005-06-29T04:00:00 Last Updated: 2005-11-02T10:00:00 Description: No description available.
CVE ID: CVE-2005-1939 State: PUBLISHED Published: 2006-01-15T00:00:00 Last Updated: 2024-08-07T22:06:57.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in a request to the Report service (TCP 8022). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15500 - http://cirt.dk/advisories/cirt-40-advisory.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/22969 - http://www.securityfocus.com/bid/15291 - http://securitytracker.com/id?1015141 - http://secunia.com/secunia_research/2005
ttp://www.securityfocus.com/bid/15291 - http://securitytracker.com/id?1015141 - http://secunia.com/secunia_research/2005-14/advisory/
CVE ID: CVE-2005-1941 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: SilverCity before 0.9.5-r1 installs (1) cgi-styler-form.py, (2) cgi-styler.py, and (3) source2html.py with read and write world permissions, which allows local users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014153 - http://bugs.gentoo.org/show_bug.cgi?id=93558 - http://www.gentoo.org/security/en/glsa/glsa-200506-05.xml - http://secunia.com/advisories/15632
CVE ID: CVE-2005-1942 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Protocol (CDP) messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/alerts/2005/Jun/1014135.html - http://www.cisco.com/warp/public/707/cisco-sn-20050608-8021x.shtml - http://www.fishnetsecurity.com/csirt/disclosure/cisco/Cisco+802.1x+Advisory.pdf - http://marc.info/?l=bugtraq&m=111842833009771&w=2 - https://exchange.xforce.ibmclo
ure/cisco/Cisco+802.1x+Advisory.pdf - http://marc.info/?l=bugtraq&m=111842833009771&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20939
CVE ID: CVE-2005-1943 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Loki download manager 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) password field to default.asp or (2) cat parameter to catinfo.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014147 - http://www.securityfocus.com/bid/13900 - http://marc.info/?l=bugtraq&m=111826992711703&w=2 - http://www.securityfocus.com/bid/13898 - http://secunia.com/advisories/15633
CVE ID: CVE-2005-1944 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: xmysqladmin 1.0 and earlier allows local users to delete arbitrary files via a symlink attack on a database backup file in /tmp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111833993822553&w=2 - http://securitytracker.com/id?1014172 - http://www.zataz.net/adviso/xmysqladmin-05292005.txt - http://secunia.com/advisories/15635 - http://bugs.gentoo.org/show_bug.cgi?id=93792
CVE ID: CVE-2005-1945 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the convert_highlite_words function in Invision Blog before 1.1.2 Final allows remote attackers to inject arbitrary web script or HTML via double hex encoded highlight data. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111833601302752&w=2 - http://www.gulftech.org/?node=research&article_id=00078-06072005 - http://secunia.com/advisories/15626
CVE ID: CVE-2005-1946 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to an editentry, replyentry, or editcomment action, or (2) the mid parameter to an aboutme action. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111833601302752&w=2 - http://www.gulftech.org/?node=research&article_id=00078-06072005 - http://secunia.com/advisories/15626
CVE ID: CVE-2005-1947 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Invision Gallery before 1.3.1 allows remote attackers to delete albums and images as another user via a link or IMG tag to the (1) albums or (2) delimg actions. Additional Analyst Notes: - CVE Program Container: References: - http://www.gulftech.org/?node=research&article_id=00079-06092005 - http://marc.info/?l=bugtraq&m=111834146710329&w=2
CVE ID: CVE-2005-1948 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Invision Gallery before 1.3.1 allow remote attackers to execute arbitrary SQL commands via (1) the comment parameter in an editcomment action or (2) the rating parameter when voting on a photo. Additional Analyst Notes: - CVE Program Container: References: - http://www.gulftech.org/?node=research&article_id=00079-06092005 - http://www.securityfocus.com/bid/13907 - http://marc.info/?l=bugtraq&m=111834146710329&w=2
CVE ID: CVE-2005-1949 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eping_validaddr function in functions.php for the ePing plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the eping_host parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111835539312985&w=2 - http://marc.info/?l=bugtraq&m=111868460811287&w=2 - http://e107plugins.co.uk/news.php - http://secunia.com/advisories/15678
CVE ID: CVE-2005-1950 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: hints.pl in Webhints 1.03 allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15652 - http://www.securityfocus.com/bid/13930 - http://marc.info/?l=bugtraq&m=111842893001406&w=2 - http://securitytracker.com/id?1014173
CVE ID: CVE-2005-1951 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the (1) products_id or (2) pid parameter to index.php or (3) goto parameter to banner.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111842744205117&w=2 - http://secunia.com/advisories/15670 - http://marc.info/?l=bugtraq&m=111936255011735&w=2 - http://www.gulftech.org/?node=re
tp://secunia.com/advisories/15670 - http://marc.info/?l=bugtraq&m=111936255011735&w=2 - http://www.gulftech.org/?node=research&article_id=00080-06102005 - http://www.securityfocus.com/bid/13979
CVE ID: CVE-2005-1952 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Pico Server (pServ) 3.3 allows remote attackers to read arbitrary files and execute arbitrary commands via a /./ (slash dot slash) before each .. (dot dot) sequence in the URL, which results in an incorrect directory depth count. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15663 - http://marc.info/?l=bugtraq&m=111852830111316&w=2 - http://sourceforge.net/project/shownotes.php?group_id=59378&release_id=334036
CVE ID: CVE-2005-1953 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the CGI extension for Pico Server (pServ) 3.3 allows remote attackers to execute arbitrary code via a long HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15663 - http://marc.info/?l=bugtraq&m=111852830111316&w=2 - http://sourceforge.net/project/shownotes.php?group_id=59378&release_id=334036
CVE ID: CVE-2005-1954 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: singapore 0.9.11 allows remote attackers to obtain sensitive information via a direct request to (1) admin.class.php, (2) any .tpl.php file in templates/admin_default/, or (3) any .tpl.php file in templates/default/, which reveal the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111868634003167&w=2 - http://securitytracker.com/id?1014186
CVE ID: CVE-2005-1955 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in singapore 0.9.11 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111868634003167&w=2 - http://www.securityfocus.com/bid/13938 - http://securitytracker.com/id?1014186
CVE ID: CVE-2005-1956 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload Manager allows remote attackers to upload arbitrary files by modifying the test variable to contain a value of '~~~~~~' (six tildes), which bypasses the file extension checks. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111868578006615&w=2 - http://www.osvdb.org/20257
CVE ID: CVE-2005-1957 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: mtnpeak.net File Upload Manager does not properly check user authentication for certain actions, which allows remote attackers to provide a modified base64-encoded file parameter and (1) read arbitrary files via the "view" action or (2) delete arbitrary files via the del action. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/17435 - http://archives.neohapsis.com/archives/bugtraq/2005-06/0116.html - http://marc.info/?l=bugtraq&m=111868578006615&w=2 - http://www.osvdb.org/20258
CVE ID: CVE-2005-1958 State: REJECTED Published: 2005-06-14T04:00:00 Last Updated: 2005-09-03T09:00:00 Description: No description available.
CVE ID: CVE-2005-1959 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: jammail.pl in jamchen JamMail 1.8 allows remote attackers to execute arbitrary commands via shell metacharacters in the mail parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014175 - http://www.securityfocus.com/bid/13937
CVE ID: CVE-2005-1960 State: PUBLISHED Published: 2005-06-14T04:00:00Z Last Updated: 2024-09-17T01:42:06.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getemails function in C.J. Steele Tattle allows remote attackers to execute arbitrary commands via shell metacharacters in certain log entries, as demonstrated using shell metacharacters in an FTP username. Additional Analyst Notes: - CVE Program Container: References: - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-06/0057.html - http://secunia.com/advisories/15582
CVE ID: CVE-2005-1961 State: PUBLISHED Published: 2005-06-14T04:00:00Z Last Updated: 2024-09-17T00:46:40.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in ObjectWeb Consortium C-JDBC before 1.3.1 allows local users to bypass intended access restrictions and obtain the cache results from another user. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15627 - http://securitytracker.com/id?1014118
CVE ID: CVE-2005-1962 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cerberus Helpdesk 0.97.3 allows remote attackers to inject arbitrary web script or HTML via the (1) errorcode parameter to index.php or (2) certain fields to clients.php. Additional Analyst Notes: - CVE Program Container: References: - http://forum.cerberusweb.com/showthread.php?threadid=5162&goto=newpost - http://securitytracker.com/id?1014128 - http://echo.or.id/adv/adv15-theday-2005.txt - http://secunia.com/advisories/15641
CVE ID: CVE-2005-1963 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to (1) reports.php, (2) knowledgebase.php, or (3) configuration.php, which leaks the information in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.wgmdev.com/jira/browse/CERB-170 - http://forum.cerberusweb.com/showthread.php?threadid=5162&goto=newpost - http://securitytracker.com/id?1014128 - http://echo.or.id/adv/adv15-theday-2005.txt - http://secunia.com/advisories/15641