Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-3556 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHPlist 2.10.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listname parameter in (a) admin/editlist.php, (2) title parameter in (b) admin/spageedit.php, (3) title field in (c) admin/template.php, (4) filter, (5) delete, and (6) start parameters in (d) admin/eventlog.php, (7) id parameter in (e) admin/configure.php, (8) find parameter in (f) admin/users.php, (9) start parameter in (g) admin/admin.php, and (10) action parameter in (h
, (8) find parameter in (f) admin/users.php, (9) start parameter in (g) admin/admin.php, and (10) action parameter in (h) admin/fckphplist.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.trapkit.de/advisories/TKADV2005-11-001.txt - http://osvdb.org/20574 - http://www.securityfocus.com/archive/1/416005/30/0/threaded - http://osvdb.org/20573 - http://www.vupen.com/english/advisories/2005/2345 - http://secunia.com/advisories/17476 - http://www.securityfocus.com/bid/15350 - http://osvdb.org/20572 - http://osvdb.org/20570 - http://osvdb.org/20571 - http://osvdb.org/20576 - http://osvdb.org/20575
CVE ID: CVE-2005-3557 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/defaults.php in PHPlist 2.10.1 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) in the selected%5B%5D parameter in an HTTP POST request. Additional Analyst Notes: - CVE Program Container: References: - http://www.trapkit.de/advisories/TKADV2005-11-001.txt - http://www.securityfocus.com/archive/1/416005/30/0/threaded - http://www.vupen.com/english/advisories/2005/2345 - http://osvdb.org/20569 - http://secunia.com/advisories/17476 - http://www.securityfoc
com/english/advisories/2005/2345 - http://osvdb.org/20569 - http://secunia.com/advisories/17476 - http://www.securityfocus.com/bid/15350
CVE ID: CVE-2005-3558 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP file inclusion vulnerability in index.php in OSTE 1.0 allows remote attackers to execute arbitrary code via the (1) page and (2) site parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17493 - http://www.securityfocus.com/bid/15340 - http://www.securityfocus.com/archive/1/415963/30/0/threaded - http://www.vupen.com/english/advisories/2005/2347 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23023 - http://osvdb.org/20578 - http://securitytracker.com/id?1015163
CVE ID: CVE-2005-3559 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. (dot dot) in the folder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15336 - http://secunia.com/advisories/19872 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23002 - http://www.securityfocus.com/archive/1/415990/30/0/threaded - http://www.assurance.com.au/advisories/200511-asterisk.txt - http://secunia.com/advisories/1
ve/1/415990/30/0/threaded - http://www.assurance.com.au/advisories/200511-asterisk.txt - http://secunia.com/advisories/17459 - http://www.vupen.com/english/advisories/2005/2346 - http://www.debian.org/security/2006/dsa-1048 - http://securitytracker.com/id?1015164 - http://osvdb.org/20577
CVE ID: CVE-2005-3560 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 through 6.1, and (5) ZoneAlarm 6.0 allow remote attackers to bypass the "Advanced Program Control and OS Firewall filters" setting via URLs in "HTML Modal Dialogs" (window.location.href) contained within JavaScript tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15347 - http://www.osvdb.org/20677 - http://securityreason.com/securityalert
erences: - http://www.securityfocus.com/bid/15347 - http://www.osvdb.org/20677 - http://securityreason.com/securityalert/155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22971 - http://www.securityfocus.com/archive/1/415968 - http://secunia.com/advisories/17450
CVE ID: CVE-2005-3561 State: REJECTED Published: 2005-11-16T07:37:00 Last Updated: 2005-12-10T10:00:00 Description: No description available.
CVE ID: CVE-2005-3562 State: REJECTED Published: 2005-11-16T07:37:00 Last Updated: 2005-12-12T10:00:00 Description: No description available.
CVE ID: CVE-2005-3563 State: REJECTED Published: 2005-11-16T07:37:00 Last Updated: 2005-12-12T10:00:00 Description: No description available.
CVE ID: CVE-2005-3564 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: envd daemon in HP-UX B.11.00 through B.11.11 allows local users to obtain privileges via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015172 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23039 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00547561 - http://www.osvdb.org/20678 - http://secunia.com/advisories/17506 - http://www.securityfocus
Display.do?docId=c00547561 - http://www.osvdb.org/20678 - http://secunia.com/advisories/17506 - http://www.securityfocus.com/bid/15359 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00547561 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1429 - http://www.vupen.com/english/advisories/2005/2357
CVE ID: CVE-2005-3565 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in remshd daemon in HP-UX B.11.00, B.11.11, and B.11.23 while running in "Trusted Mode" allows remote attackers to gain unauthorized system access via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1151 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23036 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1576 - http://www.vupen.com/
36 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1576 - http://www.vupen.com/english/advisories/2005/2358 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00543854 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A766 - http://secunia.com/advisories/17507 - http://osvdb.org/20679 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00543854 - http://www.securityfocus.com/bid/15366 - http://securitytracker.com/id?1015173
CVE ID: CVE-2005-3566 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute arbitrary code via a long VCSI18N_LANG environment variable to (1) haagent, (2) haalert, (3) haattr, (4) hacli, (5) hacli_runcmd, (6) haclus, (7) haconf, (8) hadebug, (9) hagrp, (10) hahb, (11) halog, (12) hareg, (13) hares, (14) hastatus, (15) hasys, (16) hatype, (17) hauser, and (18) tststew. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2350 - h
. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2350 - http://securitytracker.com/id?1015169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22986 - http://securityreason.com/securityalert/174 - http://osvdb.org/20673 - http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08a.html - http://secunia.com/advisories/17502 - http://marc.info/?l=bugtraq&m=113199516516880&w=2 - http://www.securityfocus.com/bid/15349
CVE ID: CVE-2005-3567 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: slapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17484 - http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVAIX53SECUR081510_247 - http://www-1.ibm.com/support/search.wss?rs=0&q=IO02714&apar=only - http://www.vupen.com/english/advisories/2005/2356 - http://www.kb.cert.org/vuls
rt/search.wss?rs=0&q=IO02714&apar=only - http://www.vupen.com/english/advisories/2005/2356 - http://www.kb.cert.org/vuls/id/194753 - http://www-1.ibm.com/support/docview.wss?uid=swg21222159 - http://www.securityfocus.com/bid/15367 - http://www.osvdb.org/20672 - http://www-1.ibm.com/support/docview.wss?rs=767&context=SSVJJU&dc=D400&uid=swg24010819&loc=en_US&cs=UTF-8&lang=en - http://securitytracker.com/id?1015171 - http://www-1.ibm.com/support/search.wss?rs=0&q=IO02697&apar=only - https://exchange.xforce.ibmcloud.com/vulnerabilities/22989
CVE ID: CVE-2005-3568 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: db2fmp process in IBM DB2 Content Manager before 8.2 Fix Pack 10 allows local users to cause a denial of service (CPU consumption) by importing a corrupted Microsoft Excel file, aka "CORRUPTED EXEL FILE WILL CAUSE TEXT SEARCH PROCESS LOOPING." Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1IO00737 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23088 - http://secunia.com/advisories/17388 - http://www.osvdb.org/20707 - http://www.securityfocus.com/bid/153
bilities/23088 - http://secunia.com/advisories/17388 - http://www.osvdb.org/20707 - http://www.securityfocus.com/bid/15376
CVE ID: CVE-2005-3569 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: INSO service in IBM DB2 Content Manager before 8.2 Fix Pack 10 on AIX allows attackers to cause a denial of service (application crash) via unknown attack vectors involving LZH files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23089 - http://www.osvdb.org/20708 - http://secunia.com/advisories/17388 - http://www-1.ibm.com/support/docview.wss?uid=swg27005891&aid=3#wq213 - http://www.securityfocus.com/bid/15376
CVE ID: CVE-2005-3570 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified cross-site scripting (XSS) vulnerability in Horde before 2.2.9 allows remote attackers to inject arbitrary web script or HTML via "not properly escaped error messages". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15409 - http://lists.horde.org/archives/announce/2005/000231.html - http://secunia.com/advisories/17468 - http://www.gentoo.org/security/en/glsa/glsa-200511-20.xml - http://www.vupen.com/english/advisories/2005/2403 - http://secunia.com/advisories/17794
ity/en/glsa/glsa-200511-20.xml - http://www.vupen.com/english/advisories/2005/2403 - http://secunia.com/advisories/17794 - http://secunia.com/advisories/17702 - http://www.debian.org/security/2005/dsa-914 - http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.207.2.109&r2=1.207.2.111&ty=h
CVE ID: CVE-2005-3571 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP file inclusion vulnerability in protection.php in CodeGrrl (a) PHPCalendar 1.0, (b) PHPClique 1.0, (c) PHPCurrently 2.0, (d) PHPFanBase 2.1, and (e) PHPQuotes 1.0 allows remote attackers to include arbitrary local files via the siteurl parameter when register_globals is enabled. NOTE: It was later reported that PHPFanBase 2.2 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015206 - http://www.securityfocus.com/bid/15417 - http://secunia.com/advisories/17542
- http://securitytracker.com/id?1015206 - http://www.securityfocus.com/bid/15417 - http://secunia.com/advisories/17542 - http://marc.info/?l=bugtraq&m=113199214723444&w=2 - http://www.vupen.com/english/advisories/2005/2402 - http://www.securityfocus.com/bid/21664 - http://securityreason.com/securityalert/176
CVE ID: CVE-2005-3572 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Peel 2.6 through 2.7 allows remote attackers to execute arbitrary SQL commands via the rubid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15415 - http://secunia.com/advisories/17536 - http://www.vupen.com/english/advisories/2005/2416 - http://www.osvdb.org/20818
CVE ID: CVE-2005-3573 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19167 - http://www.ubuntu.com/usn/usn-242-1 - http://secunia.com/advisories/18503 - http://www.vupen.com/english/advisories/2005/2404 - ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U - http://www.trustix.org/errata/200
ies/2005/2404 - ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U - http://www.trustix.org/errata/2006/0012/ - http://www.redhat.com/support/errata/RHSA-2006-0204.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10038 - http://www.osvdb.org/20819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23139 - http://secunia.com/advisories/18456 - http://securitytracker.com/id?1015735 - http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html - http://secunia.com/advisories/17874 - http://secunia.com/advisories/19532 - http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222 - http://www.securityfocus.com/
om/advisories/19532 - http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222 - http://www.securityfocus.com/bid/15408 - http://secunia.com/advisories/18612 - http://secunia.com/advisories/17511 - http://mail.python.org/pipermail/mailman-users/2005-September/046523.html - http://secunia.com/advisories/19196 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732 - http://www.debian.org/security/2006/dsa-955
CVE ID: CVE-2005-3574 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP file inclusion vulnerability in index.php of iCMS allows remote attackers to include arbitrary files via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20820 - http://www.vupen.com/english/advisories/2005/2415 - http://secunia.com/advisories/17561 - http://osvdb.org/ref/20/20820-icms-file_inclusion.txt - http://hackers.by.lv/showthread.php?p=416
CVE ID: CVE-2005-3575 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show.php in Cyphor 0.19 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/416562 - http://www.securiteam.com/unixfocus/6P00F1FEKC.html - http://securityreason.com/securityalert/180 - http://www.vupen.com/english/advisories/2005/2420 - http://www.osvdb.org/20983 - http://www.securityfocus.com/bid/15418
CVE ID: CVE-2005-3576 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: ts.exe in Walla TeleSite 3.0 and earlier allows remote attackers to access privileged information by entering the article number in tsurl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/416581/30/0/threaded - http://www.securityfocus.com/bid/15419 - http://secunia.com/advisories/17547
CVE ID: CVE-2005-3577 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability (XSS) in ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the sug parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/416581/30/0/threaded - http://securitytracker.com/id?1015204 - http://www.securityfocus.com/bid/15419 - http://secunia.com/advisories/17547
CVE ID: CVE-2005-3578 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to inject arbitrary SQL commands via the sug parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/416581/30/0/threaded - http://securitytracker.com/id?1015204 - http://www.osvdb.org/20883 - http://www.securityfocus.com/bid/15419
CVE ID: CVE-2005-3579 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to access arbitrary local files via the querystring. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/416581/30/0/threaded - http://securitytracker.com/id?1015204 - http://securityreason.com/securityalert/179 - http://www.securityfocus.com/bid/15419
CVE ID: CVE-2005-3580 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: QDBM before 1.8.33-r2 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17427/ - http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml - http://www.vupen.com/english/advisories/2005/2281 - http://www.osvdb.org/20527 - http://www.securityfocus.com/bid/15120
CVE ID: CVE-2005-3581 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: GDAL before 1.3.0-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17427/ - http://www.osvdb.org/20529 - http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml - http://www.vupen.com/english/advisories/2005/2281 - http://www.securityfocus.com/bid/15120
CVE ID: CVE-2005-3582 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick before 6.2.4.2-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17427/ - http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml - http://www.vupen.com/english/advisories/2005/2281 - http://www.osvdb.org/20528 - http://www.securityfocus.com/bid/15120
CVE ID: CVE-2005-3583 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and 1.5.0_05 and possibly other versions allow remote attackers to cause a denial of service (JVM unresponsive) via a crafted serialized object, such as a font object as demonstrated on JBoss. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/143 - http://marc.info/?l=bugtraq&m=113113125121878&w=2 - http://www.securityfocus.com/bid/15312 - http://secunia.com/advisories/17478/
CVE ID: CVE-2005-3584 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to inject arbitrary web script or HTML via the forum parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=113122187101383&w=2 - http://www.securityfocus.com/bid/15276
CVE ID: CVE-2005-3585 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the forum parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/419280/100/0/threaded - http://www.osvdb.org/20441 - http://secunia.com/advisories/17410/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22972 - http://marc.info/?l=bugtraq&m=113122187101383&w=2 - http://glide.stanford.edu/yichen/research/sec.pdf - http://www.securityfocus.
rc.info/?l=bugtraq&m=113122187101383&w=2 - http://glide.stanford.edu/yichen/research/sec.pdf - http://www.securityfocus.com/bid/15277
CVE ID: CVE-2005-3586 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: content.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation path of the application via a URL that causes the application to return an error. Additional Analyst Notes: - CVE Program Container: References: - http://irannetjob.com/content/view/153/28/ - http://marc.info/?l=bugtraq&m=113106195532404&w=2
CVE ID: CVE-2005-3587 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:17:23.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper boundary checks in petite.c in Clam AntiVirus (ClamAV) before 0.87.1 allows attackers to perform unknown attacks via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2005:205 - http://sourceforge.net/project/shownotes.php?release_id=368319