Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-1807 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to inject arbitrary web script or HTML via the URL. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107911090901744&w=2 - http://securitytracker.com/id?1009403 - http://www.cfwebstore.com/whatsnewdetail.cfm?WhatsNew__WhatsNewID=43 - http://www.s-quadra.com/advisories/Adv-20040312.txt - http://www.securityfocus.com/bid/9856 - http://www.osvdb.org/4230 - https://exchange.xforce.ibmcloud.c
dv-20040312.txt - http://www.securityfocus.com/bid/9856 - http://www.osvdb.org/4230 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15454 - http://secunia.com/advisories/11112
CVE ID: CVE-2004-1808 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Extcompose in metamail does not verify the output file before writing to it, which allows local users to overwrite arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107910934926062&w=2 - http://www.securityfocus.com/bid/9850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15460
CVE ID: CVE-2004-1809 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpBB 2.0.6d and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) postdays parameter to viewtopic.php or (2) topicdays parameter to viewforum.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpbb.com/support/documents.php?mode=changelog#206 - http://www.osvdb.org/4259 - http://www.osvdb.org/4257 - http://marc.info/?l=bugtraq&m=107920498205324&w=2 - http://secunia.com/advisories/11121 - https://exchange.xforce.ibmcloud
tp://marc.info/?l=bugtraq&m=107920498205324&w=2 - http://secunia.com/advisories/11121 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15464 - http://www.securityfocus.com/bid/9865 - http://www.securityfocus.com/bid/9866
CVE ID: CVE-2004-1810 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:47.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Javascript engine in Opera 7.23 allows remote attackers to cause a denial of service (crash) by creating a new Array object with a large size value, then writing into that array. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107936810909082&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15413 - http://www.securityfocus.com/bid/9869
CVE ID: CVE-2004-1811 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL HTTP Server in HP Web-enabled Management Software 5.0 through 5.92, with anonymous access enabled, allows remote attackers to compromise the trusted certificates by uploading their own certificates. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107936784030214&w=2 - http://www.securityfocus.com/bid/9859 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15466 - http://secunia.com/advisories/11126 - http://www.securityfocus.com/advisories/6448 - http://www.immunitysec
ties/15466 - http://secunia.com/advisories/11126 - http://www.securityfocus.com/advisories/6448 - http://www.immunitysec.com/downloads/hp_http.sxw.pdf - http://www.tru64.org/stories.php?story=04/03/12/0204078 - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0057.html - http://www.ciac.org/ciac/bulletins/o-100.shtml
CVE ID: CVE-2004-1812 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Agent Common Services (1) cam.exe and (2) awservices.exe in Unicenter TNG 2.4 allow remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15472 - http://marc.info/?l=bugtraq&m=107936784030214&w=2 - ftp://ftp.ca.com/CAproducts/unicenter/CCS31/nt/qi52764/QI52764.DB0 - http://secunia.com/advisories/11131 - http://www.securityfocus.com/bid/9863 - http://www.derkeiler.com/Mailing-Lists
0 - http://secunia.com/advisories/11131 - http://www.securityfocus.com/bid/9863 - http://www.derkeiler.com/Mailing-Lists/VulnWatch/2004-03/0008.html - http://www.immunitysec.com/downloads/awservices.sxw.pdf
CVE ID: CVE-2004-1813 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: VocalTec VGW4/8 Gateway 8.0 allows remote attackers to bypass authentication via an HTTP request to home.asp with a trailing slash (/). Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107936739131657&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15476 - http://www.securityfocus.com/bid/9876
CVE ID: CVE-2004-1814 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in VocalTec VGW4/8 Gateway 8.0 allows remote attackers to read protected files via .. (dot dot) sequences in an HTTP request, as demonstrated using home.asp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107936739131657&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15476 - http://www.securityfocus.com/bid/9876
CVE ID: CVE-2004-1815 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consumption). Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107936690702515&w=2 - http://secunia.com/advisories/11132 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15473 - http://www.macromedia.com/devnet/security/security_zone/mpsb04-04.html - http://www.securityfocus.com/bid/9
ties/15473 - http://www.macromedia.com/devnet/security/security_zone/mpsb04-04.html - http://www.securityfocus.com/bid/9877
CVE ID: CVE-2004-1816 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Sun Java System Application Server 7.0 Update 2 and earlier, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consumption). Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107936690702515&w=2 - http://secunia.com/advisories/11130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15473 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57517-1 - http://sunsolve.sun.
loud.com/vulnerabilities/15473 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57517-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201713-1 - http://www.securityfocus.com/bid/9877
CVE ID: CVE-2004-1817 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules.php in Php-Nuke 7.1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) Your Name field, (2) e-mail field, (3) nicname field, (4) fname parameter, (5) ratenum parameter, or (6) search field. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107937752811633&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15491 - http://secunia.com/advisories/11135 - http://www.securityfocus.com/bid/9879
CVE ID: CVE-2004-1818 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in nmimage.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary script as other users by injecting arbitrary script into the z parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15497 - http://secunia.com/advisories/11134 - http://www.osvdb.org/4293 - http://www.securityfocus.com/bid/9881 - http://marc.info/?l=bugtraq&m=107937780222514&w=2
CVE ID: CVE-2004-1819 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to obtain sensitive information via a direct request to displaycategory.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11134 - http://www.securityfocus.com/bid/9881 - http://www.osvdb.org/4291 - http://marc.info/?l=bugtraq&m=107937780222514&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15493
CVE ID: CVE-2004-1820 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary PHP code by modifying the basepath parameter to reference a URL on a remote web server that contains fileFunctions.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4292 - http://secunia.com/advisories/11134 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15496 - http://www.securityfocus.com/bid/9881 - http://marc.info/?l=bugtraq
exchange.xforce.ibmcloud.com/vulnerabilities/15496 - http://www.securityfocus.com/bid/9881 - http://marc.info/?l=bugtraq&m=107937780222514&w=2
CVE ID: CVE-2004-1821 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to gain privileges or perform unauthorized database operations via the gid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15498 - http://secunia.com/advisories/11134 - http://www.securityfocus.com/bid/9881 - http://marc.info/?l=bugtraq&m=107937780222514&w=2 - http://www.osvdb.org/4294
CVE ID: CVE-2004-1822 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_REFERER parameter to login.php, (2) HTTP_REFERER parameter to register.php, or (3) target parameter to profile.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9882 - http://marc.info/?l=bugtraq&m=107939479713136&w=2 - http://www.osvdb.org/4334 - http://phorum.org/changelog.txt - http://www.osvdb.org/4335 - https
&m=107939479713136&w=2 - http://www.osvdb.org/4334 - http://phorum.org/changelog.txt - http://www.osvdb.org/4335 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15494 - http://secunia.com/advisories/11157 - http://securitytracker.com/id?1009433 - http://www.osvdb.org/4333
CVE ID: CVE-2004-1823 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Jelsoft vBulletin 2.0 beta 3 through 3.0 can4 allows remote attackers to inject arbitrary web script or HTML via the (1) page parameter to showthread.php or (2) order parameter to forumdisplay.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15495 - http://www.osvdb.org/4311 - http://www.securityfocus.com/bid/9888 - http://securitytracker.com/id?1009440 - http://marc.info/?l=bugtraq&m=107945556112453
//www.securityfocus.com/bid/9888 - http://securitytracker.com/id?1009440 - http://marc.info/?l=bugtraq&m=107945556112453&w=2 - http://www.securityfocus.com/bid/9889 - http://secunia.com/advisories/11142 - http://www.osvdb.org/4310
CVE ID: CVE-2004-1824 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary web script or HTML via the what parameter to memberlist.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15495 - http://www.securityfocus.com/bid/6226 - http://securitytracker.com/id?1009440 - http://www.securityfocus.com/bid/9887 - http://marc.info/?l=bugtraq&m=107945556112453&w=2 - http://www.iss.net/security_center/static/10679.php - ht
/bid/9887 - http://marc.info/?l=bugtraq&m=107945556112453&w=2 - http://www.iss.net/security_center/static/10679.php - http://www.osvdb.org/4312 - http://archives.neohapsis.com/archives/bugtraq/2002-11/0276.html - http://secunia.com/advisories/11142
CVE ID: CVE-2004-1825 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) return or (2) mos_change_template parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15499 - http://secunia.com/advisories/11140 - http://www.osvdb.org/4308 - http://marc.info/?l=bugtraq&m=107945576020593&w=2 - http://www.osvdb.org/46
visories/11140 - http://www.osvdb.org/4308 - http://marc.info/?l=bugtraq&m=107945576020593&w=2 - http://www.osvdb.org/4665
CVE ID: CVE-2004-1826 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15500 - http://www.osvdb.org/4307 - http://secunia.com/advisories/11140 - http://www.securityfocus.com/bid/9891 - http://marc.info/?l=bugtraq&m=107945576020593&w=2
CVE ID: CVE-2004-1827 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.yabbforum.com/community/YaBB.pl?board=general%3Baction=display%3Bnum=1093133233 - http://marc.info/?l=bugtraq&m=107936800226430&w=2 - http://secunia.com/advisories/11128 - http://www.securityfocus.com/bid/9873 - http://marc.info/?l=bugtraq&m=10794806
2 - http://secunia.com/advisories/11128 - http://www.securityfocus.com/bid/9873 - http://marc.info/?l=bugtraq&m=107948064923981&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15488 - http://securitytracker.com/id?1009427
CVE ID: CVE-2004-1828 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote attackers to uninstall Vcard and delete database tables via a direct request to uninstall.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107957312531199&w=2 - http://www.securityfocus.com/bid/9910 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15522
CVE ID: CVE-2004-1829 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in error.php in Gijza.net Error Manager 2.1 for PHP-Nuke 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) pagetitle or (2) error parameters, or (3) certain parameters in the error log. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15530 - http://secunia.com/advisories/11164 - http://www.securityfocus.com/bid/9911 - https://exchange.xforce.ibmcloud.c
15530 - http://secunia.com/advisories/11164 - http://www.securityfocus.com/bid/9911 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15529 - http://marc.info/?l=bugtraq&m=107963064317560&w=2
CVE ID: CVE-2004-1830 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: error.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive information via an invalid (1) language, (2) newlang, or (3) lang parameter, which leaks the pathname in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15524 - http://www.osvdb.org/4386 - http://secunia.com/advisories/11164 - http://www.securityfocus.com/bid/9911 - http://marc.info/?l=bugtraq&m=107963064317560&w=2
CVE ID: CVE-2004-1831 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Chrome 1.2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large length value, which leads to a null dereference or out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107964719614657&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15535 - http://www.securityfocus.com/bid/9898 - http://aluigi.altervista.org/adv/chrome-boom-adv.txt
CVE ID: CVE-2004-1832 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the GUI admin service in Mac OS X Server 10.3 allows remote attackers to cause a denial of service (crash and restart) via a large amount of data to TCP port 660. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15533 - http://marc.info/?l=bugtraq&m=107965605008575&w=2 - http://marc.info/?l=bugtraq&m=107971225327629&w=2 - http://www.securityfocus.com/bid/9914
CVE ID: CVE-2004-1833 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database administrative privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4381 - http://securitytracker.com/id?1009500 - http://www.securityfocus.com/bid/9929 - http://www.idefense.com/application/poi/display?id=80&type=vulnerabilities&flashstatus=true - http://secunia.com/advisories/11172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15546
CVE ID: CVE-2004-1834 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication information, on the hard disk, which could allow local users to gain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1009509 - http://www.osvdb.org/4446 - http://www.redhat.com/support/errata/RHSA-2004-562.html - http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/15547 - https://oval.cisecurity.org/repos
curity/ASA-2006-081.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/15547 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11133 - http://www.securityfocus.com/bid/9933 - http://secunia.com/advisories/19072 - http://secunia.com/advisories/11176 - http://marc.info/?l=bugtraq&m=107981737322495&w=2 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1 - http://www.vupen.com/english/advisories/2006/0789 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.ht
pache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd65d8ba68ba17e7dee
871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https:
s.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2004-1835 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrary SQL via the (1) img, (2) cat, (3) sort_key, (4) order_key, (5) user, or (6) album parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1009512 - http://marc.info/?l=bugtraq&m=107997906500032&w=2 - http://secunia.com/advisories/11194 - http://www.osvdb.org/4472 - http://www.securityfocus.com/bid/9944 - https://exchange.xforce.ibmcloud.com/vulnerabilities/