Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-2550 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-08T01:29:13.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in unspecified Perl scripts in SandSurfer before 1.7.1 allow remote attackers to inject arbitrary web script or HTML, which is later executed by a target who views reports containing the injected data. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=356882 - http://www.securityfocus.com/bid/9801 - http://secunia.com/advisories/11028 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15377 - http://www.osvdb.
1 - http://secunia.com/advisories/11028 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15377 - http://www.osvdb.org/4132
CVE ID: CVE-2004-2551 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-08T01:29:14.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Layton HelpBox 3.0.1 allow remote attackers to execute arbitrary SQL commands via (1) the sys_comment_id parameter in editcommentenduser.asp, (2) the sys_suspend_id parameter in editsuspensionuser.asp, (3) the table parameter in export_data.asp, (4) the sys_analgroup parameter in manageanalgrouppreference.asp, (5) the sys_asset_id parameter in quickinfoassetrequests.asp, (6) the sys_eusername parameter in quickinfoenduserrequests.asp, and the sys_request_id parameter in (7) requestaudi
sp, (6) the sys_eusername parameter in quickinfoenduserrequests.asp, and the sys_request_id parameter in (7) requestauditlog.asp, (8) requestcommentsenduser.asp, (9) selectrequestapplytemplate.asp, and (10) selectrequestlink.asp, resulting in an ability to create a new HelpBox user account and read, modify, or delete data from the backend database. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/8178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16772 - http://secunia.com/advisories/12118 - http://www.osvdb.org/8179 - http://www.securiteam.com/windowsntfocus/5VP0S0ADFW.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16774 - http://ww
w.securiteam.com/windowsntfocus/5VP0S0ADFW.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16774 - http://www.osvdb.org/8175 - http://www.securityfocus.com/bid/10776 - http://www.osvdb.org/8176 - http://www.osvdb.org/8177 - http://www.osvdb.org/8172 - http://www.osvdb.org/8170 - http://www.osvdb.org/8174 - http://www.osvdb.org/8171 - http://www.osvdb.org/8173
CVE ID: CVE-2004-2552 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-08T01:29:14.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in XBoard 4.2.7 and earlier might allow local users to execute arbitrary code via a long -icshost command line argument. NOTE: since the program is not setuid and not normally called from remote programs, there may not be a typical attack vector for the issue that crosses privilege boundaries. Therefore this may not be a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2004-03/0030.html - https://exchange.xforce.ibmcloud.com/vu
ces: - http://archives.neohapsis.com/archives/fulldisclosure/2004-03/0030.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15362 - http://secunia.com/advisories/11016 - http://www.osvdb.org/4123
CVE ID: CVE-2004-2553 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-08T01:29:14.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ignition Project ignitionServer 0.1.2 through 0.1.2-R2 allows remote authenticated users with local IRC operator privileges to obtain global IRC operator privileges by using the unofficial umode command with the +ORD argument. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1009301 - http://sourceforge.net/tracker/index.php?func=detail&aid=891555&group_id=96071&atid=613526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15363 - http://www.securityfocus.com/bid/9783 - ht
71&atid=613526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15363 - http://www.securityfocus.com/bid/9783 - http://www.osvdb.org/4121 - http://secunia.com/advisories/11017 - http://cvs.sourceforge.net/viewcvs.py/ignition/ignitionserver/docs/security/20040302-operator-privilege-escalation.txt?view=markup
CVE ID: CVE-2004-2554 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-08T01:29:14.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/o-090.shtml - http://securitytracker.com/id?1008755 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15367 - http://secunia.com/advisories/11014 - http://support.novell.com/cgi-
xchange.xforce.ibmcloud.com/vulnerabilities/15367 - http://secunia.com/advisories/11014 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10090585.htm - http://www.osvdb.org/4120 - http://www.securityfocus.com/bid/9441
CVE ID: CVE-2004-2555 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-08T01:29:14.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography (arithmetic and XOR operations) to relate the Control password to the Administrator password, which allows local users to calculate the Administrator password if they know the Control password and password recovery key. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/6735 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16327 - http://secunia.com/advisories/11790 - http://www.securityfocus.com/bid/
ange.xforce.ibmcloud.com/vulnerabilities/16327 - http://secunia.com/advisories/11790 - http://www.securityfocus.com/bid/10467 - http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0081.html
CVE ID: CVE-2004-2556 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-08T01:29:14.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetGear WG602 (aka WG602v1) Wireless Access Point firmware 1.04.0 and 1.5.67 has a hardcoded account of username "super" and password "5777364", which allows remote attackers to modify the configuration. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/365230 - http://www.securityfocus.com/bid/10459 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0036.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16312 - http://slashdot.org/articles/04/06/08/1319206.
/0036.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16312 - http://slashdot.org/articles/04/06/08/1319206.shtml?tid=126&tid=172 - http://kbserver.netgear.com/kb_web_files/n101383.asp - http://www.osvdb.org/6743 - http://www.ciac.org/ciac/bulletins/o-159.shtml - http://secunia.com/advisories/11773
CVE ID: CVE-2004-2557 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-08T01:29:14.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetGear WG602 (aka WG602v1) Wireless Access Point 1.7.14 has a hardcoded account of username "superman" and password "21241036", which allows remote attackers to modify the configuration. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/365230 - http://www.securityfocus.com/bid/10459 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0036.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16312 - http://slashdot.org/articles/04/06/08/1319206.shtml?tid=126&ti
ps://exchange.xforce.ibmcloud.com/vulnerabilities/16312 - http://slashdot.org/articles/04/06/08/1319206.shtml?tid=126&tid=172 - http://kbserver.netgear.com/kb_web_files/n101383.asp - http://www.osvdb.org/6743 - http://www.ciac.org/ciac/bulletins/o-159.shtml - http://secunia.com/advisories/11773
CVE ID: CVE-2004-2558 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-08T01:29:13.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity Manager Solution 5.1, Configuration Manager 4.2, Configuration Manager for Automated Teller Machines 2.1.0, and IBM WebSphere Everyplace Server, Service Provider Offering for Multi-platforms 2.1.3 to 2.15 allow remote attackers to hijack sessions of authenticated users via unknown attack vectors involving certain cookies, aka "Potential Credential Impersonation Attack." Additional Analyst Not
nknown attack vectors involving certain cookies, aka "Potential Credential Impersonation Attack." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10449 - http://www-1.ibm.com/support/docview.wss?uid=swg21168762 - http://secunia.com/advisories/11761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16315
CVE ID: CVE-2004-2559 State: PUBLISHED Published: 2005-11-22T02:00:00 Last Updated: 2024-08-08T01:29:14.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including (1) Mediaselectiondialog, (2) Recent changes, (3) feed, and (4) search, possibly due to the lack of ACL checks. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1011802 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17799 - http://www.osvdb.org/11005 - http://wiki.splitbrain.org/wiki:old_changes
CVE ID: CVE-2004-2560 State: PUBLISHED Published: 2005-11-22T02:00:00 Last Updated: 2024-08-08T01:29:14.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: DokuWiki before 2004-10-19, when used on a web server that permits execution based on file extension, allows remote attackers to execute arbitrary code by uploading a file with an appropriate extension such as ".php" or ".cgi". Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17899 - http://www.osvdb.org/11084 - http://wiki.splitbrain.org/wiki:old_changes - http://www.securityfocus.com/bid/11486
CVE ID: CVE-2004-2561 State: PUBLISHED Published: 2005-11-22T02:00:00 Last Updated: 2024-08-08T01:29:14.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute arbitrary SQL commands via (1) the ISS_TECH_CENTER_LOGIN cookie in search.asp and (2) one or more cookies in DoCustomerOptions.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12121 - http://www.securityfocus.com/bid/10771 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16775 - http://www.osvdb.org/8180 - http://www.securiteam.com/windowsntfocus/5RP0N0
.xforce.ibmcloud.com/vulnerabilities/16775 - http://www.osvdb.org/8180 - http://www.securiteam.com/windowsntfocus/5RP0N0ADGK.html
CVE ID: CVE-2004-2562 State: PUBLISHED Published: 2005-11-22T02:00:00 Last Updated: 2024-08-08T01:29:14.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises (LBE) Web Helpdesk before 4.0.0.81 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/windowsntfocus/5QP0M0ADGI.html - http://secunia.com/advisories/12123 - http://www.lbehelpdesk.com/patch/web/history.txt - http://www.osvdb.org/8181 - http://www.securityfocus.com/bid/10773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16779
CVE ID: CVE-2004-2563 State: PUBLISHED Published: 2005-11-22T02:00:00 Last Updated: 2024-08-08T01:29:14.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Serena TeamTrack 6.1.1 allows remote attackers to obtain sensitive information such as user names, versions, and database information, and conduct cross-site scripting (XSS) attacks, via a direct request to tmtrack.dll with modified LoginPage and Template parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/8185 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16771 - http://secunia.com/advisories/12122 - http://www.
s/16777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16771 - http://secunia.com/advisories/12122 - http://www.securityfocus.com/bid/10770 - http://www.osvdb.org/8183 - http://www.securiteam.com/windowsntfocus/5SP0O0ADGG.html - http://www.osvdb.org/8182
CVE ID: CVE-2004-2564 State: PUBLISHED Published: 2005-11-22T02:00:00 Last Updated: 2024-08-08T01:29:14.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, allow remote attackers to inject arbitrary web script or HTML via (1) the show parameter in show.asp and (2) the title parameter in showperf.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11748 - http://www.osvdb.org/6584 - http://securitytracker.com/id?1010353 - http://www.securityfocus.com/bid/10444 - http://www.oliverkarow.de/research/sambar.tx
//securitytracker.com/id?1010353 - http://www.securityfocus.com/bid/10444 - http://www.oliverkarow.de/research/sambar.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16286 - http://www.osvdb.org/6583
CVE ID: CVE-2004-2565 State: PUBLISHED Published: 2005-11-22T02:00:00 Last Updated: 2024-08-08T01:29:14.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, when the administrative IP address restrictions have been modified from the default, allow remote authenticated users to read arbitrary files via (1) a "..\" (dot dot backslash) in the file parameter to showini.asp, or (2) an absolute path with drive letter in the log parameter to showlog.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11748 - http://secu
.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11748 - http://securitytracker.com/id?1010353 - http://www.securityfocus.com/bid/10444 - http://www.oliverkarow.de/research/sambar.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16287 - http://www.osvdb.org/6585
CVE ID: CVE-2004-2566 State: PUBLISHED Published: 2005-11-22T02:00:00 Last Updated: 2024-08-08T01:29:14.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in LiveWorld products, possibly including (1) LiveForum, (2) LiveQ&A, (3) LiveChat, and (4) LiveFocusGroup, allow remote attackers to inject arbitrary web script or HTML via the q parameter in (a) search.jsp, (b) findclub!execute.jspa, and (c) search!execute.jspa. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2004-08/0326.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17104 - http://securitytracker
archives/bugtraq/2004-08/0326.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17104 - http://securitytracker.com/id?1011036 - http://www.gulftech.org/?node=research&article_id=00044-08232004 - http://www.osvdb.org/9180
CVE ID: CVE-2004-2567 State: PUBLISHED Published: 2005-11-22T02:00:00 Last Updated: 2024-08-08T01:29:14.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ReciPants 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) user id, (2) recipe id, (3) category id, and (4) other ID number fields. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=90737&release_id=234415 - http://securitytracker.com/id?1009984 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16024 - http://secunia.com/advisories/11533 - http://www.securityfocus.com/bid/10250
CVE ID: CVE-2004-2568 State: PUBLISHED Published: 2005-11-22T02:00:00Z Last Updated: 2024-09-16T21:57:02.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ReciPants 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) user id, (2) recipe id, (3) category id, and (4) other ID number fields. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1009984 - http://secunia.com/advisories/11533 - http://sourceforge.net/project/shownotes.php?group_id=90737&release_id=234415 - http://www.osvdb.org/5787 - http://www.securityfocus.com/bid/10250
CVE ID: CVE-2004-2569 State: PUBLISHED Published: 2005-11-22T02:00:00 Last Updated: 2024-08-08T01:29:14.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: ipmenu 0.0.3 before Debian GNU/Linux ipmenu_0.0.3-5 allows local users to overwrite arbitrary files via a symlink attack on the ipmenu.log temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10269 - http://secunia.com/advisories/17682 - http://www.debian.org/security/2005/dsa-907 - http://securitytracker.com/id?1010064 - http://secunia.com/advisories/11526 - http://www.osvdb.org/5788 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=244709 - https://exchange.xforce
es/11526 - http://www.osvdb.org/5788 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=244709 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16052
CVE ID: CVE-2004-2570 State: PUBLISHED Published: 2005-11-22T02:00:00 Last Updated: 2024-08-08T01:29:14.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 7.54 allows remote attackers to modify properties and methods of the location object and execute Javascript to read arbitrary files from the client's local filesystem or display a false URL to the user. Additional Analyst Notes: - CVE Program Container: References: - http://www.greymagic.com/security/advisories/gm008-op/ - http://secunia.com/advisories/12233 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16904 - http://www.opera.com/docs/changelogs/windows/754/ - http://www.gentoo.org/security/en/glsa/glsa
/vulnerabilities/16904 - http://www.opera.com/docs/changelogs/windows/754/ - http://www.gentoo.org/security/en/glsa/glsa-200408-05.xml - http://www.securityfocus.com/bid/10873 - http://osvdb.org/8331 - http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0131.html
CVE ID: CVE-2004-2571 State: PUBLISHED Published: 2005-11-22T02:00:00 Last Updated: 2024-08-08T01:29:14.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in EnderUNIX isoqlog 2.1.1 allow remote attackers to execute arbitrary code via the (1) parseQmailFromBytesLine, (2) parseQmailToRemoteLine, (3) parseQmailToLocalLine, (4) parseSendmailFromBytesLine, (5) parseSendmailToLine, (6) parseEximFromBytesLine, and (7) parseEximToLine functions in Parser.c; allow local users to execute arbitrary code via the (8) lowercase and (9) check_syslog_date functions in Parser.c, and (10) unspecified functions in Dir.c; and allow unspecified attackers to execute arbitra
_date functions in Parser.c, and (10) unspecified functions in Dir.c; and allow unspecified attackers to execute arbitrary code via the (11) loadconfig and (12) removespaces functions in loadconfig.c, the (13) loadLang function in LangCfg.c, and (14) unspecified functions in Html.c. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1010292 - http://www.securityfocus.com/bid/10433 - http://archives.neohapsis.com/archives/bugtraq/2004-05/0298.html - http://secunia.com/advisories/11741/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/16308
CVE ID: CVE-2004-2572 State: PUBLISHED Published: 2005-11-22T02:00:00 Last Updated: 2024-08-08T01:29:14.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: AMAX Magic Winmail Server 3.6 allows remote attackers to obtain sensitive information by entering (1) invalid characters such as "()" or (2) a large number of characters in the Lookup field on the netaddressbook.php web form, which reveals the path in an ldaplib.php error message when the ldap_search function fails, due to improper processing of the $keyword variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15361 - http://www.osvdb.org/4118 - http://
ontainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15361 - http://www.osvdb.org/4118 - http://www.securityfocus.com/bid/9786 - http://secunia.com/advisories/11015 - http://www.magicwinmail.net/download/english-help.chm - http://members.lycos.co.uk/r34ct/main/ldaplib/ldaplib.php%20reveal%20local%20path%20of%20Winmail%203.6%20webmail%20directory.txt
CVE ID: CVE-2004-2573 State: PUBLISHED Published: 2005-11-28T23:00:00 Last Updated: 2024-08-08T01:29:14.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in tables_update.inc.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to execute arbitrary PHP code via an external URL in the appdir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12074 - https://savannah.gnu.org/bugs/?func=detailitem&item_id=7478 - http://www.osvdb.org/7599
CVE ID: CVE-2004-2574 State: PUBLISHED Published: 2005-11-28T23:00:00Z Last Updated: 2024-09-17T02:52:29.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to inject arbitrary web script or HTML via the date parameter in a calendar.uicalendar.planner menuaction. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/bugs/?func=detailitem&item_id=7478 - http://www.securityfocus.com/bid/12082 - http://www.osvdb.org/7600
CVE ID: CVE-2004-2575 State: PUBLISHED Published: 2005-11-28T23:00:00Z Last Updated: 2024-09-17T01:40:57.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpGroupWare 0.9.14.005 and earlier allow remote attackers to obtain sensitive information via a direct request to (1) hook_admin.inc.php, (2) hook_home.inc.php, (3) class.holidaycalc.inc.php, and (4) setup.inc.php.sample, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/7602 - https://savannah.gnu.org/bugs/?func=detailitem&item_id=7478 - http://www.osvdb.org/7604 - http://www.osvdb.org/7601 - http://www.osvdb.org/7603
CVE ID: CVE-2004-2576 State: PUBLISHED Published: 2005-11-28T23:00:00 Last Updated: 2024-08-08T01:29:14.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: class.vfs_dav.inc.php in phpGroupWare 0.9.16.000 does not create .htaccess files to enable authorization checks for access to users' home-directory files, which allows remote attackers to obtain sensitive information from these files. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/7617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19195 - https://savannah.gnu.org/bugs/?func=detailitem&item_id=8359