Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-4256 State: PUBLISHED Published: 2005-12-15T11:00:00Z Last Updated: 2024-09-16T17:03:19.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via the forum_title parameter. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID. In addition, its accuracy is in question because "forum_title" does not appear to be specified in the source code for XM Forum RC3. It is possible, but not certain, that this is CVE-2004-2211. Additional Analyst Notes: - CVE Program Container: References: - http://w
, but not certain, that this is CVE-2004-2211. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15858
CVE ID: CVE-2005-4257 State: PUBLISHED Published: 2005-12-15T11:00:00Z Last Updated: 2024-09-17T03:27:43.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys WRT54GS and BEFW11S4 allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LAND). NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15861
CVE ID: CVE-2005-4258 State: PUBLISHED Published: 2005-12-15T11:00:00 Last Updated: 2024-08-07T23:38:51.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LanD). NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44543 - http://www.securityfocus.com/bid/15864
CVE ID: CVE-2005-4259 State: PUBLISHED Published: 2005-12-15T11:00:00 Last Updated: 2024-08-07T23:38:51.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the (1) TID parameter in topic.asp, (2) FORUM_ID parameter in forum.asp, and (3) PROFILE_ID parameter in profile.asp. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15859 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40004
CVE ID: CVE-2005-4260 State: PUBLISHED Published: 2005-12-15T11:00:00 Last Updated: 2024-08-07T23:38:51.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interpretation conflict in includes/mainfile.php in PHP-Nuke 7.9 and later allows remote attackers to perform cross-site scripting (XSS) attacks by replacing the ">" in the tag with a "<", which bypasses the regular expressions that sanitize the data, but is automatically corrected by many web browsers. NOTE: it could be argued that this vulnerability is due to a design limitation of many web browsers; if so, then this should not be treated as a vulnerability in PHP-Nuke. Additional Analyst Notes: - CVE Program Container: Refe
then this should not be treated as a vulnerability in PHP-Nuke. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/419496/100/0/threaded - http://www.securityfocus.com/archive/1/419991/100/0/threaded - http://www.securityfocus.com/bid/15855
CVE ID: CVE-2005-4261 State: PUBLISHED Published: 2005-12-15T11:00:00 Last Updated: 2024-08-07T23:38:51.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Positive Software Corporation CP+ (cpplus) before 2.5.5 allows attackers to have unknown impact and attack vectors, related to "a possible security flaw caused by a bug in Perl." NOTE: unless CP+ includes its own copy of Perl with CVE-2005-3962, this is a different vulnerability than CVE-2005-3962; however, there is insufficient information to be sure. Additional Analyst Notes: - CVE Program Container: References: - http://cpplus.info/feature_25.html - http://www.vupen.com/english/advisories/2005/2
CVE Program Container: References: - http://cpplus.info/feature_25.html - http://www.vupen.com/english/advisories/2005/2828 - http://secunia.com/advisories/18005 - http://www.securityfocus.com/bid/15799 - http://www.trustix.org/errata/2005/0068/ - http://secunia.com/advisories/17975
CVE ID: CVE-2005-4262 State: PUBLISHED Published: 2005-12-15T11:00:00 Last Updated: 2024-08-07T23:38:51.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the News module in Envolution allows remote attackers to inject arbitrary web script or HTML via the (1) startrow and (2) catid parameter. NOTE: this issue might be resultant from the SQL injection problem (CVE-2005-4263). Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2927 - http://secunia.com/advisories/18069 - http://securitytracker.com/id?1015351 - http://www.securityfocus.com/bid/15857 - http://www.osvdb.org/21751
CVE ID: CVE-2005-4263 State: PUBLISHED Published: 2005-12-15T11:00:00 Last Updated: 2024-08-07T23:38:51.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the News module in Envolution allows remote attackers to execute arbitrary SQL commands via the (1) startrow and (2) catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21752 - http://www.vupen.com/english/advisories/2005/2927 - http://secunia.com/advisories/18069 - http://securitytracker.com/id?1015351 - http://www.securityfocus.com/bid/15857
CVE ID: CVE-2005-4264 State: PUBLISHED Published: 2005-12-15T11:00:00 Last Updated: 2024-08-07T23:38:51.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields, and (3) id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18067 - http://securitytracker.com/id?1015352 - http://www.osvdb.org/21730 - http://www.vupen.com/english/advisories/2005/2928 - http://www.securityfocus.com/bid/15853 - http://www.nii.co.in/vuln/PHPSupportTickets.html
CVE ID: CVE-2005-4265 State: REJECTED Published: 2005-12-15T11:00:00 Last Updated: 2009-10-31T09:00:00 Description: No description available.
CVE ID: CVE-2005-4266 State: PUBLISHED Published: 2005-12-15T11:00:00Z Last Updated: 2024-09-16T18:03:49.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: WorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a randomly generated session ID that is associated with a username, which allows remote attackers to perform actions as other users by guessing or sniffing the random value. Additional Analyst Notes: - CVE Program Container: References: - http://www.ipomonis.com/advisories/mdaemon.zip - http://secunia.com/advisories/17990
CVE ID: CVE-2005-4267 State: PUBLISHED Published: 2005-12-21T11:00:00 Last Updated: 2024-08-07T23:38:51.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends with a "}" character, as demonstrated using long (1) LIST, (2) LSUB, (3) SEARCH TEXT, (4) STATUS INBOX, (5) AUTHENTICATE, (6) FETCH, (7) SELECT, and (8) COPY commands. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015391 - http://www.vupen.com/english/advisories/2005/3005 - http://seclists.org/lists/fulldisclosure/2005/Dec/1037.html - http://
ttp://www.vupen.com/english/advisories/2005/3005 - http://seclists.org/lists/fulldisclosure/2005/Dec/1037.html - http://www.securityfocus.com/bid/15980 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=359 - http://securityreason.com/securityalert/277 - http://secunia.com/advisories/17640
CVE ID: CVE-2005-4268 State: PUBLISHED Published: 2005-12-15T18:08:00 Last Updated: 2024-08-07T23:38:51.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by more than 8 digits. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25098 - http://www.redhat.com/support/errata/RHSA-2007-0245.html - http://secunia.com/advisories/25161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23855 - https://issues.rpath.com/browse/RP
a.com/advisories/25161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23855 - https://issues.rpath.com/browse/RPL-1338 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:03.cpio.asc - http://secunia.com/advisories/18280 - http://www.osvdb.org/22194 - http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:237 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6860 - http://www.redhat.com/support/errata/RHSA-2010-0145.html - http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html - http://secunia.com/advisories/20117 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=172669 - https://oval.cisecurity.org/
ecunia.com/advisories/20117 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=172669 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10450 - http://www.securityfocus.com/bid/16057 - http://secunia.com/advisories/18278 - http://secunia.com/advisories/18395 - http://secunia.com/advisories/18251 - https://usn.ubuntu.com/234-1/
CVE ID: CVE-2005-4269 State: PUBLISHED Published: 2005-12-15T20:00:00Z Last Updated: 2024-09-16T17:18:55.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: mshtml.dll in Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers to cause a denial of service (access violation) by causing mshtml.dll to process button-focus events at the same time that a document is reloading, as seen in Microsoft Office InfoPath 2003 by repeatedly clicking the "Delete" button in a repeating section in a form. NOTE: the normal operation of InfoPath appears to involve a local user without any privilege boundaries, so this might not be a vulnerability in InfoPath. If no realist
o involve a local user without any privilege boundaries, so this might not be a vulnerability in InfoPath. If no realistic scenarios exist for this problem in other products, then perhaps it should be excluded from CVE. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/kb/908233/ - http://www.securiteam.com/windowsntfocus/6V00B1FEUE.html
CVE ID: CVE-2005-4270 State: PUBLISHED Published: 2005-12-15T20:00:00 Last Updated: 2024-08-07T23:38:51.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an HTTP 401 response with a WWW-Authenticate header containing a long Realm field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15873 - http://secunia.com/advisories/18013 - http://www.securityfocus.com/archive/1/419586/100/0/threaded - http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_AppScanQA_RemoteCodeExec.pdf - http://securitytracker.com/id?1015362 - htt
/www.cybsec.com/vuln/CYBSEC_Security_Advisory_AppScanQA_RemoteCodeExec.pdf - http://securitytracker.com/id?1015362 - http://securityreason.com/securityalert/260 - http://www.vupen.com/english/advisories/2005/2933
CVE ID: CVE-2005-4271 State: PUBLISHED Published: 2005-12-15T22:00:00 Last Updated: 2024-08-07T23:38:51.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the malloc debug system in IBM AIX 5.3 allows local users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=IY78227&apar=only - http://www.securityfocus.com/bid/15881 - http://www.vupen.com/english/advisories/2005/2947 - http://secunia.com/advisories/18088 - http://www.securityfocus.com/archive/1/419577/100/0/threaded
CVE ID: CVE-2005-4272 State: PUBLISHED Published: 2005-12-15T22:00:00 Last Updated: 2024-08-07T23:38:51.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in IBM AIX 5.1, 5.2, and 5.3 allow remote attackers to execute arbitrary code via (1) muxatmd and (2) slocal. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=IY78225&apar=only - http://www-1.ibm.com/support/search.wss?rs=0&q=IY78222&apar=only - http://www-1.ibm.com/support/search.wss?rs=0&q=IY78223&apar=only - http://securitytracker.com/id?1015367 - http://www.securityfocus.com/bid/15878 - http://www.vupen.com/english/advisories/2005/2947
uritytracker.com/id?1015367 - http://www.securityfocus.com/bid/15878 - http://www.vupen.com/english/advisories/2005/2947 - http://securitytracker.com/id?1015366 - http://secunia.com/advisories/18088 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY78224&apar=only - http://www.securityfocus.com/bid/15879 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY78226&apar=only - http://www.securityfocus.com/archive/1/419577/100/0/threaded - http://www-1.ibm.com/support/search.wss?rs=0&q=IY78221&apar=only
CVE ID: CVE-2005-4273 State: PUBLISHED Published: 2005-12-15T22:00:00 Last Updated: 2024-08-07T23:38:51.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in (1) getShell and (2) getCommand in IBM AIX 5.3 allow local users to append to arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15880 - http://www.vupen.com/english/advisories/2005/2947 - http://secunia.com/advisories/18088 - http://www.securityfocus.com/archive/1/419641/100/0/threaded - http://www.securityfocus.com/archive/1/419577/100/0/threaded - http://www.securityfocus.com/archive/1/419634/100/0/threaded
CVE ID: CVE-2005-4274 State: PUBLISHED Published: 2005-12-15T23:00:00 Last Updated: 2024-08-07T23:38:51.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Business Objects WebIntelligence 6.5x allows remote attackers to cause a denial of service (user account lock out) via unknown attack vectors related to "authentication mechanisms" and "form input." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015355 - http://www.securityfocus.com/archive/1/419493/100/0/threaded
CVE ID: CVE-2005-4275 State: PUBLISHED Published: 2005-12-16T11:00:00Z Last Updated: 2024-09-16T20:58:06.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Scientific Atlanta DPX2100 Cable Modem allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LanD), as demonstrated using hping2. NOTE: the provenance of this issue is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15870
CVE ID: CVE-2005-4276 State: PUBLISHED Published: 2005-12-16T11:00:00Z Last Updated: 2024-09-17T00:42:00.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Westell Versalink 327W allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LanD). NOTE: the provenance of this issue is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15869
CVE ID: CVE-2005-4277 State: PUBLISHED Published: 2005-12-16T11:00:00 Last Updated: 2024-08-07T23:38:51.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in toendaCMS before 0.7 Beta allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435412/100/0/threaded - http://www.securityfocus.com/bid/18178 - http://www.toenda.com/files/toendaCMS_0.7_Beta.zip - http://secunia.com/advisories/18058 - http://securitytracker.com/id?1015354 - http://www.osvdb.org/21767 - http://www.vupen.com/english/adviso
isories/18058 - http://securitytracker.com/id?1015354 - http://www.osvdb.org/21767 - http://www.vupen.com/english/advisories/2005/2926
CVE ID: CVE-2005-4278 State: PUBLISHED Published: 2005-12-16T11:00:00 Last Updated: 2024-08-07T23:38:51.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Perl before 5.8.7-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2119 - http://www.gentoo.org/security/en/glsa/glsa-200510-14.xml - http://secunia.com/advisories/55314 - http://secunia.com/advisories/17232 - http://www.osvdb.org/20086 - http://www.se
- http://secunia.com/advisories/55314 - http://secunia.com/advisories/17232 - http://www.osvdb.org/20086 - http://www.securityfocus.com/bid/15120
CVE ID: CVE-2005-4279 State: PUBLISHED Published: 2005-12-16T11:00:00 Last Updated: 2024-08-07T23:38:51.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Qt-UnixODBC before 3.3.4-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2119 - http://www.gentoo.org/security/en/glsa/glsa-200510-14.xml - http://www.osvdb.org/20087 - http://secunia.com/advisories/17232 - http://www.securityfocus.com/bid/15120
CVE ID: CVE-2005-4280 State: PUBLISHED Published: 2005-12-16T11:00:00 Last Updated: 2024-08-07T23:38:51.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in CMake before 2.2.0-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20088 - http://www.vupen.com/english/advisories/2005/2119 - http://www.gentoo.org/security/en/glsa/glsa-200510-14.xml - http://secunia.com/advisories/17232 - http://www.securityfocus.com/bid/15120
CVE ID: CVE-2005-4281 State: PUBLISHED Published: 2005-12-16T11:00:00 Last Updated: 2024-08-07T23:38:51.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Zaygo HostingCart 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via certain search module parameters, possibly the root parameter to zaygo.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2916 - http://pridels0.blogspot.com/2005/12/hostingcart-xss.html - http://secunia.com/advisories/18036 - http://www.osvdb.org/21729
CVE ID: CVE-2005-4282 State: PUBLISHED Published: 2005-12-16T11:00:00 Last Updated: 2024-08-07T23:38:51.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Zaygo DomainCart 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML, possibly via the root parameter to zaygo.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15893 - http://www.vupen.com/english/advisories/2005/2917 - http://pridels0.blogspot.com/2005/12/domaincart-xss.html - http://secunia.com/advisories/18035 - http://www.osvdb.org/21729
CVE ID: CVE-2005-4283 State: PUBLISHED Published: 2005-12-16T11:00:00 Last Updated: 2024-08-07T23:38:51.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in The CITY Shop 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via parameters to the search module, possibly SKey to store.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21728 - http://pridels0.blogspot.com/2005/12/city-shop-xss-vuln.html - http://www.vupen.com/english/advisories/2005/2913 - http://www.securityfocus.com/bid/15897 - http://secunia.com/advisories/18041
CVE ID: CVE-2005-4284 State: PUBLISHED Published: 2005-12-16T11:00:00 Last Updated: 2024-08-07T23:38:51.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in StaticStore Search Engine 1.189A and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to search.cgi, possibly the keywords parameter. NOTE: this issue was originally disputed by the vendor, but it has since been acknowledged. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21714 - http://www.securityfocus.com/bid/15895 - http://www.osvdb.org/22032 - http://pridels0.blogspot.com/2005/12/staticstore-
http://www.securityfocus.com/bid/15895 - http://www.osvdb.org/22032 - http://pridels0.blogspot.com/2005/12/staticstore-search-engine-friendly-e.html - http://www.vupen.com/english/advisories/2005/2915 - http://secunia.com/advisories/18037
CVE ID: CVE-2005-4285 State: PUBLISHED Published: 2005-12-16T11:00:00 Last Updated: 2024-08-07T23:38:51.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pdestore.cgi in Dick Copits PDEstore 1.8 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the search module parameter or the (2) product and (3) cart_id parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15898 - http://www.osvdb.org/21727 - http://www.vupen.com/english/advisories/2005/2912 - http://secunia.com/advisories/18042 - http://pridels0.blogspot.com/2005/12/pdestore-xss-vuln.html
CVE ID: CVE-2005-4286 State: PUBLISHED Published: 2005-12-16T11:00:00 Last Updated: 2024-08-07T23:38:51.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in PhpLogCon before 1.2.2 allows remote attackers to use arbitrary profiles via unknown vectors involving "'smart' values for userid and password," probably involving an SQL injection vulnerability in the (1) pass and (2) usr parameters in submit.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.phplogcon.com/Article9.phtml - http://cvs.sourceforge.net/viewcvs.py/phplogcon/phplogcon/submit.php?r1=1.4&r2=1.5 - http://www.vupen.com/english/advisories/2005/2930 - http://sec
viewcvs.py/phplogcon/phplogcon/submit.php?r1=1.4&r2=1.5 - http://www.vupen.com/english/advisories/2005/2930 - http://secunia.com/advisories/18053