Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tyfocus.com/archive/1/450315/100/0/threaded - http://www.vupen.com/english/advisories/2005/2515 - http://www.securityfocus.com/bid/15515 - http://secunia.com/advisories/22669 - http://secunia.com/advisories/17659 - http://www.securityfocus.com/archive/1/450315/100/0/threaded
CVE ID: CVE-2005-3748 State: PUBLISHED Published: 2005-11-22T11:00:00 Last Updated: 2024-08-07T23:24:35.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21002 - http://www.vupen.com/english/advisories/2005/2516 - http://www.securityfocus.com/bid/15519 - http://secunia.com/advisories/17638 - http://lostmon.blogspot.com/2005/11/nuke-et-search-module-query-variable.html
CVE ID: CVE-2005-3749 State: PUBLISHED Published: 2005-11-22T11:00:00 Last Updated: 2024-08-07T23:24:36.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified "absolute path vulnerabilities" in the diagela command (diagela.sh) in IBM AIX 5.2 and 5.3 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=IY78801&apar=only - https://exchange.xforce.ibmcloud.com/vulnerabilities/23108 - http://www.osvdb.org/20768 - http://www.securityfocus.com/bid/15397 - http://www.vupen.com/english/advisories/2005/2392 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY78926&apar=only - http://
/www.vupen.com/english/advisories/2005/2392 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY78926&apar=only - http://www-1.ibm.com/support/search.wss?rs=0&q=IY78800&apar=only - http://securitytracker.com/id?1015212 - http://secunia.com/advisories/17474
CVE ID: CVE-2005-3750 State: PUBLISHED Published: 2005-11-22T19:00:00 Last Updated: 2024-08-07T23:24:35.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 8.51 on Linux and Unix systems allows remote attackers to execute arbitrary code via shell metacharacters (backticks) in a URL that another product provides in a command line argument when launching Opera. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/linux/851/ - http://www.novell.com/linux/security/advisories/2005_28_sr.html - http://secunia.com/advisories/18111 - http://securityreason.com/securityalert/199 - http://www.vupen.com/english/advisories/2005/251
ia.com/advisories/18111 - http://securityreason.com/securityalert/199 - http://www.vupen.com/english/advisories/2005/2519 - http://www.osvdb.org/21003 - http://securitytracker.com/id?1015253 - http://www.securityfocus.com/bid/15521 - http://www.securityfocus.com/archive/1/417393/30/0/threaded - http://secunia.com/secunia_research/2005-57/advisory/ - http://secunia.com/advisories/16907 - http://www.gentoo.org/security/en/glsa/glsa-200512-10.xml - http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0677.html
CVE ID: CVE-2005-3751 State: PUBLISHED Published: 2005-11-22T20:00:00 Last Updated: 2024-08-07T23:24:36.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-length and Transfer-encoding headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-934 - http://secunia.com/advisories/18367 - http://www.novell.com/linux/security/advisories/2006_05_19.html - http://www.apsis.ch/pound/pound_list/archive/2005/2005-10/112
www.novell.com/linux/security/advisories/2006_05_19.html - http://www.apsis.ch/pound/pound_list/archive/2005/2005-10/1129827166000/index_html?fullMode=1#1129827166000 - http://www.gentoo.org/security/en/glsa/glsa-200606-05.xml - http://secunia.com/advisories/20215 - http://secunia.com/advisories/18381 - http://secunia.com/advisories/20510
CVE ID: CVE-2005-3752 State: PUBLISHED Published: 2005-11-22T20:00:00Z Last Updated: 2024-09-16T18:54:29.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ldapdiff before 1.1.1 has unknown impact and attack vectors, related to "ldapdiff.conf path construction". Additional Analyst Notes: - CVE Program Container: References: - http://webtomware.rhoen.de/ldapdiff-1.2.1.tar.gz
CVE ID: CVE-2005-3753 State: PUBLISHED Published: 2005-11-22T20:00:00Z Last Updated: 2024-09-16T18:12:55.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel before after 2.6.12 and before 2.6.13.1 might allow attackers to cause a denial of service (Oops) via certain IPSec packets that cause alignment problems in standard multi-block cipher processors. NOTE: it is not clear whether this issue can be triggered by an attacker. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.kernel.org/show_bug.cgi?id=5194
CVE ID: CVE-2005-3754 State: PUBLISHED Published: 2005-11-22T21:00:00 Last Updated: 2024-08-07T23:24:35.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via the proxystylesheet variable, which will be executed in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17644 - http://metasploit.com/research/vulns/google_proxystylesheet/ - http://www.securityfocus.com/archive/1/417310/30/0/threaded - http://w
loit.com/research/vulns/google_proxystylesheet/ - http://www.securityfocus.com/archive/1/417310/30/0/threaded - http://www.vupen.com/english/advisories/2005/2500 - http://www.osvdb.org/20978 - http://www.securityfocus.com/bid/15509 - http://securitytracker.com/id?1015246
CVE ID: CVE-2005-3755 State: PUBLISHED Published: 2005-11-22T21:00:00 Last Updated: 2024-08-07T23:24:35.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to determine the existence of arbitrary files via a relative path from a style sheet directory, then comparing the resulting error messages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17644 - http://www.osvdb.org/20977 - http://metasploit.com/research/vulns/google_proxystylesheet/ - http://www.securityfocus.com/archive/1/417310/30/0/threaded - http:
asploit.com/research/vulns/google_proxystylesheet/ - http://www.securityfocus.com/archive/1/417310/30/0/threaded - http://www.vupen.com/english/advisories/2005/2500 - http://www.securityfocus.com/bid/15509 - http://securitytracker.com/id?1015246
CVE ID: CVE-2005-3756 State: PUBLISHED Published: 2005-11-22T21:00:00 Last Updated: 2024-08-07T23:24:36.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to port scan arbitrary hosts via URLs with modified targets and ports, then comparing the resulting error messages to determine open and closed ports. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17644 - http://www.osvdb.org/20979 - http://metasploit.com/research/vulns/google_proxystylesheet/ - http://www.securityfocus.com/archive/1/417310/30/0/threaded - http://www.vupen.com/english/adv
google_proxystylesheet/ - http://www.securityfocus.com/archive/1/417310/30/0/threaded - http://www.vupen.com/english/advisories/2005/2500 - http://www.securityfocus.com/bid/15509 - http://securitytracker.com/id?1015246
CVE ID: CVE-2005-3757 State: PUBLISHED Published: 2005-11-22T21:00:00 Last Updated: 2024-08-07T23:24:36.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and execute arbitrary code via dangerous Java class methods in select attribute of xsl:value-of tags in XSLT style sheets, such as (1) system-property, (2) sys:getProperty, and (3) run:exec. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17644 - http://metasploit.com/research/vulns/google_proxystylesheet/ - http://www.securityfocus.c
secunia.com/advisories/17644 - http://metasploit.com/research/vulns/google_proxystylesheet/ - http://www.securityfocus.com/archive/1/417310/30/0/threaded - http://www.vupen.com/english/advisories/2005/2500 - http://www.securityfocus.com/bid/15509 - http://securitytracker.com/id?1015246 - http://www.osvdb.org/20981
CVE ID: CVE-2005-3758 State: PUBLISHED Published: 2005-11-22T21:00:00 Last Updated: 2024-08-07T23:24:36.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via a proxystylesheet variable that contains a malicious XSLT style sheet. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20980 - http://secunia.com/advisories/17644 - http://metasploit.com/research/vulns/google_proxystylesheet/ - http://www.securityfocus.com/archive/1/417310/30/0/thre
- http://metasploit.com/research/vulns/google_proxystylesheet/ - http://www.securityfocus.com/archive/1/417310/30/0/threaded - http://www.vupen.com/english/advisories/2005/2500 - http://www.securityfocus.com/bid/15509 - http://securitytracker.com/id?1015246
CVE ID: CVE-2005-3759 State: PUBLISHED Published: 2005-11-22T21:00:00 Last Updated: 2024-08-07T23:24:35.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Horde before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) gzip/tar and (2) css MIME viewers, which do not filter or escape dangerous HTML when extracting and displaying attachments. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200511-20.xml - http://www.vupen.com/english/advisories/2005/2536 - http://secunia.com/advisories/17599 - http://www.securityfocus.com/archive/1/417436
n.com/english/advisories/2005/2536 - http://secunia.com/advisories/17599 - http://www.securityfocus.com/archive/1/417436/30/0/threaded - http://www.securityfocus.com/bid/15535 - http://secunia.com/advisories/17703 - http://lists.horde.org/archives/announce/2005/000232.html - http://www.debian.org/security/2005/dsa-909
CVE ID: CVE-2005-3760 State: PUBLISHED Published: 2005-11-22T23:00:00 Last Updated: 2024-08-07T23:24:36.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the BBOORB module in IBM WebSphere Application Server for z/OS 5.0 allows attackers to cause a denial of service (ABEND). Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1PK13936 - http://securitytracker.com/id?1015255 - http://secunia.com/advisories/17658 - http://www.vupen.com/english/advisories/2005/2522
CVE ID: CVE-2005-3761 State: PUBLISHED Published: 2005-11-22T23:00:00 Last Updated: 2024-08-07T23:24:36.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Exponent CMS 0.96.3 and later versions allows remote attackers to inject arbitrary web script or HTML via (1) Javascript in forms produced by the form generator or (2) the parameters to the installer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/417218 - http://secunia.com/advisories/17655 - http://secunia.com/advisories/17505
CVE ID: CVE-2005-3762 State: PUBLISHED Published: 2005-11-22T23:00:00 Last Updated: 2024-08-07T23:24:36.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the navigation module (navigationmodule) in Exponent CMS 0.96.3 and later versions allows remote attackers to execute arbitrary SQL commands via the parent parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/417218 - http://www.securityfocus.com/bid/15389 - http://www.osvdb.org/21023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23109 - http://secunia.com/advisories/17655 - http://secunia.com/advisories/17505
CVE ID: CVE-2005-3763 State: PUBLISHED Published: 2005-11-22T23:00:00 Last Updated: 2024-08-07T23:24:36.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exponent CMS 0.96.3 and later versions includes the full installation path in the base parameter to thumb.php, which allows remote attackers to obtain sensitive information. NOTE: this might be resultant from an absolute path traversal vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/417218 - http://secunia.com/advisories/17655 - http://secunia.com/advisories/17505
CVE ID: CVE-2005-3764 State: PUBLISHED Published: 2005-11-22T23:00:00Z Last Updated: 2024-09-16T23:20:21.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check the MIME type of uploaded files, with unknown impact from the preview icon, possibly involving injection of HTML. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/417218 - http://secunia.com/advisories/17655
CVE ID: CVE-2005-3765 State: PUBLISHED Published: 2005-11-22T23:00:00 Last Updated: 2024-08-07T23:24:36.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, which allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/417218 - http://www.securityfocus.com/bid/15503 - http://secunia.com/advisories/17655 - http://secunia.com/advisories/17505
CVE ID: CVE-2005-3766 State: PUBLISHED Published: 2005-11-22T23:00:00 Last Updated: 2024-08-07T23:24:36.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exponent CMS 0.96.3 and later versions stores sensitive user pages under the web document root with insufficient access control even though certain permissions are specified, which allows attackers to access the pages by browsing uploaded files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/417218 - http://secunia.com/advisories/17655 - http://secunia.com/advisories/17505
CVE ID: CVE-2005-3767 State: PUBLISHED Published: 2005-11-22T23:00:00 Last Updated: 2024-08-07T23:24:36.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exponent CMS 0.96.3 and later versions does not properly restrict the types of uploaded files, which allows remote attackers to upload and execute PHP files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15391 - http://www.securityfocus.com/archive/1/417218 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23113 - http://secunia.com/advisories/17655 - http://secunia.com/advisories/17505
CVE ID: CVE-2005-3768 State: PUBLISHED Published: 2005-11-23T00:00:00 Last Updated: 2024-08-07T23:24:36.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015247 - http://secunia.com/advisories/17684 - http://www.vupen
Container: References: - http://securitytracker.com/id?1015247 - http://secunia.com/advisories/17684 - http://www.vupen.com/english/advisories/2005/2517 - http://securitytracker.com/id?1015249 - http://securityresponse.symantec.com/avcenter/security/Content/2005.11.21.html - http://securitytracker.com/id?1015248
CVE ID: CVE-2005-3769 State: PUBLISHED Published: 2005-11-23T00:00:00 Last Updated: 2024-08-07T23:24:36.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in files.php in PHP Download Manager 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22827 - http://www.securityfocus.com/bid/15517
CVE ID: CVE-2005-3770 State: PUBLISHED Published: 2005-11-23T00:00:00 Last Updated: 2024-08-07T23:24:36.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP-Post (PHPp) 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the subject in a post, or the user parameter to (2) profile.php and (3) mail.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17706 - http://www.osvdb.org/21057 - http://www.securityfocus.com/bid/15524 - http://irannetjob.com/content/view/168/28/ - http://www.osvdb.org/21059 - http://www.securityfocus.com/archive/1/417434/30/0/threade
etjob.com/content/view/168/28/ - http://www.osvdb.org/21059 - http://www.securityfocus.com/archive/1/417434/30/0/threaded - http://www.securityfocus.com/bid/15532 - http://www.vupen.com/english/advisories/2005/2533
CVE ID: CVE-2005-3771 State: PUBLISHED Published: 2005-11-23T00:00:00 Last Updated: 2024-08-07T23:24:36.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via (1) "GET and other variables" and (2) "SEF". Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21039 - http://www.vupen.com/english/advisories/2005/2526 - http://www.securityfocus.com/bid/15526 - http://www.joomla.org/content/view/499/66/ - http://www.osvdb.org/21040 - http://secunia.com/advisories/17675
CVE ID: CVE-2005-3772 State: PUBLISHED Published: 2005-11-23T00:00:00 Last Updated: 2024-08-07T23:24:36.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Joomla! before 1.0.4 allow remote attackers to execute arbitrary SQL commands via the (1) Itemid variable in the Polls modules and (2) multiple unspecified methods in the mosDBTable class. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23178 - http://www.securityfocus.com/bid/15526 - http://www.joomla.org/content/view/499/66/ - http://www.osvdb.org/21042 - https://
p://www.securityfocus.com/bid/15526 - http://www.joomla.org/content/view/499/66/ - http://www.osvdb.org/21042 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23177 - http://www.osvdb.org/21043 - http://secunia.com/advisories/17675
CVE ID: CVE-2005-3773 State: PUBLISHED Published: 2005-11-23T00:00:00 Last Updated: 2024-08-07T23:24:36.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Joomla! before 1.0.4 has unknown impact and attack vectors, related to "Potential misuse of Media component file management functions." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2526 - http://www.securityfocus.com/bid/15526 - http://www.joomla.org/content/view/499/66/ - http://secunia.com/advisories/17675
CVE ID: CVE-2005-3774 State: PUBLISHED Published: 2005-11-23T00:00:00 Last Updated: 2024-08-07T23:24:36.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to create embryonic connections that that would not produce a valid connection with the end system, including (1) SYN packets with invalid checksums, which do not result in a RST; or, from an external interface, (2) one byte of "meaningless data," or (3) a TTL that is one less than needed to reach the internal destination. Additional Analyst Notes: - CVE Program Container: References:
one less than needed to reach the internal destination. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25077 - http://www.osvdb.org/24140 - http://www.securityfocus.com/bid/15525 - http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_security_notice09186a0080624a37.html - http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038983.html - http://www.securityfocus.com/archive/1/426989/100/0/threaded - http://www.cisco.com/warp/public/707/cisco-response-20051122-pix.shtml - http://www.securityfocus.com/
/100/0/threaded - http://www.cisco.com/warp/public/707/cisco-response-20051122-pix.shtml - http://www.securityfocus.com/archive/1/426991/100/0/threaded - http://www.kb.cert.org/vuls/id/853540 - http://secunia.com/advisories/17670 - http://www.securityfocus.com/archive/1/427041/100/0/threaded - http://www.vupen.com/english/advisories/2005/2546 - http://www.securityfocus.com/archive/1/417458/30/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038971.html
CVE ID: CVE-2005-3775 State: PUBLISHED Published: 2005-11-23T01:00:00 Last Updated: 2024-08-07T23:24:36.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in pollvote.php in PollVote allows remote attackers to include arbitrary files via a URL in the pollname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15439/ - http://secunia.com/advisories/17574/ - http://marc.info/?l=bugtraq&m=113199182125058&w=2 - http://www.vupen.com/english/advisories/2005/2430 - http://securityreason.com/securityalert/177
CVE ID: CVE-2005-3776 State: PUBLISHED Published: 2005-11-23T01:00:00 Last Updated: 2024-08-07T23:24:36.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allow remote attackers to inject arbitrary web script or HTML via (1) the subject field when creating a new thread and (2) information passed to the Reputation system. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17577/ - http://marc.info/?l=bugtraq&m=113198945111329&w=2
CVE ID: CVE-2005-3777 State: PUBLISHED Published: 2005-11-23T01:00:00 Last Updated: 2024-08-07T23:24:36.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allows remote attackers to delete or move private messages (PM) via modified fields in the inbox form. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17577/ - http://marc.info/?l=bugtraq&m=113198945111329&w=2 - http://securityreason.com/securityalert/175
CVE ID: CVE-2005-3778 State: PUBLISHED Published: 2005-11-23T01:00:00Z Last Updated: 2024-09-16T17:48:51.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in MyBulletinBoard (MyBB) before 1.0 PR2 Rev 686 allows attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17577/ - http://community.mybboard.net/showthread.php?tid=4507&pid=27223#pid27223