Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
dset profile. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/419642/100/0/threaded
CVE ID: CVE-2005-4418 State: PUBLISHED Published: 2006-03-22T11:00:00 Last Updated: 2024-08-07T23:46:04.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: util-vserver before 0.30.208-1 with kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux sets a default policy that trusts unknown capabilities, which could allow local users to conduct unauthorized activities. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19333 - http://www.debian.org/security/2006/dsa-1011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25407 - http://www.securityfocus.com/bid/17180 - http://secunia.com/advisories/19339
CVE ID: CVE-2005-4419 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) series, (2) cat_parent, (3) cat, and (4) div parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/honeycomb-archive-honeycomb-archive.html - http://www.attrition.org/pipermail/vim/2006-March/000580.html - http://www.osvdb.org/21827 - https://exchange.xforce.ibmcloud.com/vulnerabili
org/pipermail/vim/2006-March/000580.html - http://www.osvdb.org/21827 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23829 - http://secunia.com/advisories/18127 - http://www.securityfocus.com/bid/15995
CVE ID: CVE-2005-4420 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Honeycomb Archive Enterprise 3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the keyword parameter in search.cfm. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/honeycomb-archive-honeycomb-archive.html - http://www.osvdb.org/21828 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23831 - http://secunia.com/advisories/18127 - http://www.securityfocus.com/bid/15995
CVE ID: CVE-2005-4421 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dev-Editor 3.0 allows remote attackers to access any directory outside the web root whose name is a substring of the web root directory name. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17537/ - http://devedit.sourceforge.net/changelog.shtml - http://www.securityfocus.com/bid/15393 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23057 - http://www.vupen.com/english/advisories/2005/2389
CVE ID: CVE-2005-4422 State: PUBLISHED Published: 2005-12-20T11:00:00Z Last Updated: 2024-09-17T02:47:32.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in toendaCMS before 0.6.2 Stable allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in data/images/albums. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/415975 - http://secunia.com/advisories/17471 - http://www.toenda.com/de/data/files/Software/toendaCMS_Version_0.6.0_Stable/toendaCMS_0.6.2.1_Stable.zip - http://w
71 - http://www.toenda.com/de/data/files/Software/toendaCMS_Version_0.6.0_Stable/toendaCMS_0.6.2.1_Stable.zip - http://www.securityfocus.com/bid/15351
CVE ID: CVE-2005-4423 State: PUBLISHED Published: 2005-12-20T11:00:00Z Last Updated: 2024-09-17T00:35:37.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in PHPFM before 0.2.3 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension to an accessible directory, as demonstrated using a file with a .php extension, aka "upload phpshell." Additional Analyst Notes: - CVE Program Container: References: - http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00085.html - http://www.securityfocus.com/bid/15335
CVE ID: CVE-2005-4424 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in PHPKIT 1.6.1 R2 and earlier might allow remote authenticated users to execute arbitrary PHP code via a .. (dot dot) in the path parameter and a %00 at the end of the filename, as demonstrated by an avatar filename ending with .png%00. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15354 - http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html - http://www.osvdb.org/20562 - http://secunia.com/advisories/17479 - http://www.hardene
ve/bugtraq/2005/11/msg00110.html - http://www.osvdb.org/20562 - http://secunia.com/advisories/17479 - http://www.hardened-php.net/advisory_212005.80.html - http://securityreason.com/securityalert/157 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23014
CVE ID: CVE-2005-4425 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:05.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to cause a denial of service (crash) via certain RTSP streams. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2391 - http://www.securityfocus.com/bid/15387 - http://secunia.com/advisories/17519 - http://www.kerio.com/kwf_history.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/23034
CVE ID: CVE-2005-4426 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:05.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interpretation conflict in YaBB before 2.1 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF file extension, which causes the HTML to be executed by a victim who views the file in Internet Explorer as a result of CVE-2005-3312. NOTE: it could be argued that this vulnerability is due to a design flaw in Internet Explorer and the proper fix should be in that browser; if so, then this should not be treated as a vulnerability in YaBB. Additional Analyst Notes: - CVE Program Cont
browser; if so, then this should not be treated as a vulnerability in YaBB. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23020 - http://www.yabbforum.com/downloads.php - http://secunia.com/advisories/17411
CVE ID: CVE-2005-4427 State: PUBLISHED Published: 2005-12-20T23:00:00 Last Updated: 2024-08-07T23:46:04.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to attachment_send.php, (2) the $addy variable in email_parser.php, (3) $address variable in email_parser.php, (4) $a_address variable in structs.php, (5) kbid parameter to cer_KnowledgebaseHandler.class.php, (6) queues[] parameter to addresses_export.php, (7) $thread variable to display.php, (8) ticket parameter to display_ticket_thread.php. Additional Analyst Notes: - CVE Program
ead variable to display.php, (8) ticket parameter to display_ticket_thread.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21991 - http://www.osvdb.org/21993 - http://marc.info/?l=full-disclosure&m=113500878630130&w=2 - http://www.osvdb.org/21992 - http://www.securityfocus.com/bid/16062 - http://www.osvdb.org/21995 - http://www.osvdb.org/21990 - http://secunia.com/advisories/18112 - http://www.osvdb.org/21988 - http://www.osvdb.org/21994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23836 - http://www.securityfocus.com/archive/1/420271/100/0/threaded - http://forum.cerberusweb.com/showthread.php?s=&postid=30315
CVE ID: CVE-2005-4428 State: PUBLISHED Published: 2005-12-20T23:00:00 Last Updated: 2024-08-07T23:46:05.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML via the kb_ask parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=113500878630130&w=2 - http://www.securityfocus.com/bid/16062 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23834 - http://secunia.com/advisories/18112 - http://www.securityfocus.com/archive/1/420271/100/0/threaded - http://www.osvdb.org/21989
CVE ID: CVE-2005-4429 State: PUBLISHED Published: 2005-12-21T00:00:00 Last Updated: 2024-08-07T23:46:04.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) sort_by and (2) sort_order parameters to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://attrition.org/pipermail/vim/2006-January/000450.html - http://www.securityfocus.com/bid/16134 - http://www.osvdb.org/21370 - http://pridels0.blogspot.com/2005/11/cs-cart-sql-inj-vuln.html
CVE ID: CVE-2005-4430 State: PUBLISHED Published: 2005-12-21T00:00:00 Last Updated: 2024-08-07T23:46:04.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in LogicBill 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) __mode and (2) __id parameters to helpdesk.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16132 - http://www.osvdb.org/21368 - http://pridels0.blogspot.com/2005/11/logicbill-10-sql-inj.html
CVE ID: CVE-2005-4431 State: PUBLISHED Published: 2005-12-21T00:00:00 Last Updated: 2024-08-07T23:46:04.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in WowBB 1.65 allows remote attackers to execute arbitrary SQL commands via the q parameter to search.php. NOTE: the view_user.php/sort_by vector is already covered by CVE-2005-1554 and CVE-2004-2181. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/11/wowbb-165-sql-vuln.html - http://www.osvdb.org/21442 - http://www.osvdb.org/21441
CVE ID: CVE-2005-4432 State: PUBLISHED Published: 2005-12-21T00:00:00 Last Updated: 2024-08-07T23:46:04.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in PlaySMS 0.8 allows remote attackers to inject arbitrary web script or HTML via the err parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=113970096305873&w=2 - http://www.vupen.com/english/advisories/2006/0548 - http://www.securityfocus.com/bid/15928 - http://www.osvdb.org/21835 - http://secunia.com/advisories/18148 - http://marc.info/?l=full-disclosure&m=113478814326427&w=2 - https://exchange.xforce.ibmcloud
unia.com/advisories/18148 - http://marc.info/?l=full-disclosure&m=113478814326427&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23665
CVE ID: CVE-2005-4433 State: PUBLISHED Published: 2005-12-21T01:00:00 Last Updated: 2024-08-07T23:46:04.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in Esselbach Storyteller CMS 1.8 allows remote attackers to inject arbitrary web script or HTML via the query parameter, which is used by the Search field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18130 - http://www.osvdb.org/21787 - http://www.vupen.com/english/advisories/2005/2985 - http://www.securityfocus.com/bid/15945 - http://pridels0.blogspot.com/2005/12/esselbach-storyteller-cms-xss-vuln.html
CVE ID: CVE-2005-4434 State: PUBLISHED Published: 2005-12-21T01:00:00 Last Updated: 2024-08-07T23:46:04.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in AbleDesign ReSearch 2.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23830 - http://www.securityfocus.com/bid/15988 - http://www.osvdb.org/21986
CVE ID: CVE-2005-4435 State: PUBLISHED Published: 2005-12-21T01:00:00 Last Updated: 2024-08-07T23:46:04.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php AbleDesign D-Man 3.x allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21984 - http://www.securityfocus.com/bid/15993 - http://secunia.com/advisories/18074 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23833
CVE ID: CVE-2005-4436 State: PUBLISHED Published: 2005-12-21T01:00:00 Last Updated: 2024-08-07T23:46:05.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS after 12.3(2), 12.3(3)B, and 12.3(2)T and other products, allows remote attackers to cause a denial of service by sending a "spoofed neighbor announcement" with (1) mismatched k values or (2) "goodbye message" Type-Length-Value (TLV). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15978 - http://www.vupen.com/english/advisories/2005/3008 - http://www.securityfocus.com/archive/1/419898/100/0/thr
/bid/15978 - http://www.vupen.com/english/advisories/2005/3008 - http://www.securityfocus.com/archive/1/419898/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040330.html - http://marc.info/?l=full-disclosure&m=113504451523186&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5454 - http://securitytracker.com/id?1015382
CVE ID: CVE-2005-4437 State: PUBLISHED Published: 2005-12-21T01:00:00 Last Updated: 2024-08-07T23:46:04.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code (MAC) in the checksum, which allows remote attackers to sniff message hashes and (1) replay EIGRP HELLO messages or (2) cause a denial of service by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/e
ARP storm on the local network. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/3008 - http://www.securityfocus.com/archive/1/419830/100/0/threaded - http://www.securityfocus.com/bid/15970 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5741 - http://www.securityfocus.com/archive/1/419898/100/0/threaded - http://securityreason.com/securityalert/274 - http://marc.info/?l=full-disclosure&m=113504451523186&w=2 - http://securitytracker.com/id?1015382 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040332.html
CVE ID: CVE-2005-4438 State: PUBLISHED Published: 2005-12-21T01:00:00 Last Updated: 2024-08-07T23:46:04.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Dec2Rar.dll 3.2.14.3, as distributed in the Symantec Antivirus Library and used by various Symantec products, allows remote attackers to execute arbitrary code via RAR archives with sub-block headers that contain incorrect values in the length field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15971 - http://securityreason.com/securityalert/276 - http://www.vupen.com/english/advisories/2005/3003 - http://www.rem0te.com/public/images/symc2.pdf -
/securityalert/276 - http://www.vupen.com/english/advisories/2005/3003 - http://www.rem0te.com/public/images/symc2.pdf - http://securitytracker.com/id?1015384 - http://www.securityfocus.com/archive/1/419853/100/0/threaded - http://www.kb.cert.org/vuls/id/305272 - http://secunia.com/advisories/18131
CVE ID: CVE-2005-4439 State: PUBLISHED Published: 2005-12-21T01:00:00 Last Updated: 2024-08-07T23:46:04.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a URL with a long (1) cmd or (2) mode parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18124 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24703 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23838 - http://secunia.com/advisories/18783 - http://www.osvdb.org/21844 - http://www.vupen.com/english/advisor
bilities/23838 - http://secunia.com/advisories/18783 - http://www.osvdb.org/21844 - http://www.vupen.com/english/advisories/2005/3000 - http://marc.info/?l=full-disclosure&m=113498708213563&w=2 - http://securitytracker.com/id?1015379 - http://www.securityfocus.com/bid/15932 - http://www.debian.org/security/2006/dsa-967
CVE ID: CVE-2005-4440 State: PUBLISHED Published: 2005-12-21T02:00:00 Last Updated: 2024-08-07T23:46:04.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 802.1q VLAN protocol allows remote attackers to bypass network segmentation and spoof VLAN traffic via a message with two 802.1q tags, which causes the second tag to be redirected from a downstream switch after the first tag has been stripped, as demonstrated by Yersinia, aka "double-tagging VLAN jumping attack." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/419831/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040333.html - http:/
/archive/1/419831/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040333.html - http://www.securityfocus.com/archive/1/419834/100/0/threaded
CVE ID: CVE-2005-4441 State: PUBLISHED Published: 2005-12-21T02:00:00 Last Updated: 2024-08-07T23:46:04.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PVLAN protocol allows remote attackers to bypass network segmentation and spoof PVLAN traffic via a PVLAN message with a target MAC address that is set to a gateway router, which causes the packet to be sent to the router, where the source MAC is modified, aka "Modification of the MAC spoofing PVLAN jumping attack," as demonstrated by pvlan.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/419831/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/200
- http://www.securityfocus.com/archive/1/419831/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040333.html - http://www.securityfocus.com/archive/1/419834/100/0/threaded
CVE ID: CVE-2005-4442 State: PUBLISHED Published: 2005-12-21T02:00:00Z Last Updated: 2024-09-17T01:41:21.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18040/ - http://www.gentoo.org/security/en/glsa/glsa-200512-07.xml - http://www.securityfocus.com/bid/15120
CVE ID: CVE-2005-4443 State: PUBLISHED Published: 2005-12-21T02:00:00Z Last Updated: 2024-09-17T00:46:34.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Gauche before 0.8.6-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18040/ - http://www.gentoo.org/security/en/glsa/glsa-200512-07.xml - http://www.securityfocus.com/bid/15120
CVE ID: CVE-2005-4444 State: PUBLISHED Published: 2005-12-21T02:00:00 Last Updated: 2024-08-07T23:46:05.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the trace message functionality in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allow remote attackers to execute arbitrary code via a long POP3 reply. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21842 - http://www.vupen.com/english/advisories/2005/3004 - http://secunia.com/secunia_research/2005-61/advisory/ - http://www.securityfocus.com/archive/1/419908/100/0/threaded - http://securitytracker.com/id?1015385 - http://secunia.com/advisories/17992 - http:/
m/archive/1/419908/100/0/threaded - http://securitytracker.com/id?1015385 - http://secunia.com/advisories/17992 - http://www.securityfocus.com/bid/15973 - http://www.pmail.com/newsflash.htm#secunia
CVE ID: CVE-2005-4445 State: PUBLISHED Published: 2005-12-21T02:00:00 Last Updated: 2024-08-07T23:46:05.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allows remote attackers to execute arbitrary code via a long email message header, which triggers a one-byte buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2005-61/advisory/ - http://www.securityfocus.com/archive/1/419908/100/0/threaded - http://securitytracker.com/id?1015385 - http://secunia.com/advisories/17992 - http://www.securityfocus.com/bid/15973 - http://www.osvdb.org/21843 - http://ww
- http://secunia.com/advisories/17992 - http://www.securityfocus.com/bid/15973 - http://www.osvdb.org/21843 - http://www.pmail.com/newsflash.htm#secunia
CVE ID: CVE-2005-4446 State: PUBLISHED Published: 2005-12-21T02:00:00 Last Updated: 2024-08-07T23:46:05.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.asp in ASPBite 8.x allows remote attackers to inject arbitrary web script or HTML via the strSearch parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15991 - http://secunia.com/advisories/18132
CVE ID: CVE-2005-4447 State: PUBLISHED Published: 2005-12-21T02:00:00 Last Updated: 2024-08-07T23:46:05.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in articles\articles_funcs.php in phpCOIN 1.2.2 allows remote attackers to modify SQL syntax and possibly execute SQL in limited circumstances via the rec_next parameter. NOTE: the original disclosure suggests that command injection is not feasible because the injection occurs after an "ORDER BY" clause, but it is likely that this bug could result in an error message path disclosure due to a syntax error, in some environments. Therefore this is an exposure and should be included in CVE. Additional A
e due to a syntax error, in some environments. Therefore this is an exposure and should be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/419637/100/0/threaded