Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-4381 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Caravel CMS 3.0 Beta 1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) fileDN and (2) folderviewer_attrs parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18151 - http://pridels0.blogspot.com/2005/12/caravel-cms-xss.html - http://www.osvdb.org/21833 - http://www.securityfocus.com/bid/15939 - http://www.osvdb.org/21834 - http://www.vupen.com/english/advisories/2005/2976
CVE ID: CVE-2005-4382 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CitySoft Community Enterprise 4.x allows remote attackers to execute arbitrary SQL commands via the (1) nodeID, (2) pageID, (3) ID, and (4) parentid parameter to index.cfm; and (5) documentFormatId parameter to document/docWindow.cfm. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html - http://secunia.com/advisories/18145/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/23818 - http://www.osvdb.or
http://secunia.com/advisories/18145/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/23818 - http://www.osvdb.org/21969 - http://www.vupen.com/english/advisories/2005/2979 - http://www.osvdb.org/21855
CVE ID: CVE-2005-4383 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.cfm in CitySoft Community Enterprise 4.x allows remote attackers to inject arbitrary web script or HTML via the (1) presentationSite, (2) docPublishYear, (3) docDescription, (4) publishState, (5) docAuthor, (6) docTitle, (7) subTopic, (8) topic, (9) topicRadio, (10) topicOnly, (11) startrow, and (12) sortby parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18145 - http://pridels0.blogspot.com/2005/12/community-enterprise-
ontainer: References: - http://secunia.com/advisories/18145 - http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html - http://www.vupen.com/english/advisories/2005/2979 - http://www.osvdb.org/21856 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23821
CVE ID: CVE-2005-4384 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid (1) fuseaction parameter to index.cfm and (2) documentid parameter to document/docWindow.cfm. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18145 - http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/23822 - http://www.osvdb.org/21857 - http://www.osvdb.org/21858
CVE ID: CVE-2005-4385 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:05.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.htm in Cofax 2.0 RC3 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15940 - http://pridels0.blogspot.com/2005/12/cofax-xss-vuln.html - http://www.osvdb.org/21850 - http://www.vupen.com/english/advisories/2005/2977
CVE ID: CVE-2005-4386 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Colony CMS 2.75 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/colony-cms-xss-vuln.html - http://www.osvdb.org/21853 - http://www.vupen.com/english/advisories/2005/2978 - http://www.securityfocus.com/bid/15941
CVE ID: CVE-2005-4387 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in home.php in contenite 0.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/contenite-xss-vuln.html - http://www.securityfocus.com/bid/15942 - http://www.vupen.com/english/advisories/2005/2980 - http://www.osvdb.org/21832 - http://secunia.com/advisories/18144
CVE ID: CVE-2005-4388 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.cfm in CONTENS 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the near parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2981 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23820 - http://www.osvdb.org/21824 - http://pridels0.blogspot.com/2005/12/contens-searchcfm-multiple-input.html - http://www.securityfocus.com/bid/15943 - http://secunia.com/advisories/18143
CVE ID: CVE-2005-4389 State: PUBLISHED Published: 2005-12-20T02:00:00 Last Updated: 2024-08-07T23:46:04.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: search.cfm in CONTENS 3.0 and earlier allows remote attackers to obtain the full server path via invalid (1) submit.y, (2) bool, (3) itemsperpage, (4) submit, (5) submit.x, (6) criteria, (7) advanced, and (8) intern parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21825 - http://www.vupen.com/english/advisories/2005/2981 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23824 - http://pridels0.blogspot.com/2005/12/contens-searchcfm-multiple-input.html - http://secunia.com/a
ulnerabilities/23824 - http://pridels0.blogspot.com/2005/12/contens-searchcfm-multiple-input.html - http://secunia.com/advisories/18143
CVE ID: CVE-2005-4390 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in ContentServ 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the StoryID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15956 - http://pridels0.blogspot.com/2005/12/contentserv-31-sql-inj.html - http://www.vupen.com/english/advisories/2005/2982 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23825 - http://www.osvdb.org/21851
CVE ID: CVE-2005-4391 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in damoon allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18118 - http://www.osvdb.org/21817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40001 - http://www.securityfocus.com/bid/15949 - http://pridels0.blogspot.com/2005/12/damoon-xss-vuln.html
CVE ID: CVE-2005-4392 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in printer_friendly.cfm in e-publish CMS 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23827 - http://secunia.com/advisories/18140 - http://www.vupen.com/english/advisories/2005/2983 - http://pridels0.blogspot.com/2005/12/e-publish-cms-vuln.html - http://www.osvdb.org/21881 - http://www.securityfocus.com/bid/15964
CVE ID: CVE-2005-4393 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in show.cfm in e-publish CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) obcatid and (2) comid parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18140 - http://www.vupen.com/english/advisories/2005/2983 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23828 - http://www.osvdb.org/21882 - http://pridels0.blogspot.com/2005/12/e-publish-cms-vuln.html - http://www.securityfocus.com/
ttp://www.osvdb.org/21882 - http://pridels0.blogspot.com/2005/12/e-publish-cms-vuln.html - http://www.securityfocus.com/bid/15964
CVE ID: CVE-2005-4394 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EPiX 3.1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search query parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/epix-search-query-xss-vuln.html - http://www.vupen.com/english/advisories/2005/2984 - http://www.osvdb.org/21849 - http://secunia.com/advisories/18234 - http://www.securityfocus.com/bid/15944
CVE ID: CVE-2005-4395 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:05.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in FarCry 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the criteria parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2986 - http://www.securityfocus.com/bid/15946 - http://pridels0.blogspot.com/2005/12/farcry-xss-vuln.html - http://www.osvdb.org/21826 - http://secunia.com/advisories/18129
CVE ID: CVE-2005-4396 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/Default.asp in iCMS allows remote attackers to inject arbitrary web script or HTML via the LoginMSG parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18085 - http://www.osvdb.org/21809
CVE ID: CVE-2005-4397 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute arbitrary SQL commands via the Event_ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18085 - http://www.osvdb.org/21810
CVE ID: CVE-2005-4398 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:05.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: NOTE: the vendor has disputed this issue. Cross-site scripting (XSS) vulnerability in lemoon 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the q parameter. NOTE: the vendor has disputed this issue, saying "Sites are built on top of ASP.NET and you use lemoon core objects to easily manage and render content. The XSS vuln. you are referring to exists in one of our public sites built on lemoon i.e. a custom made site (as all sites are). The problem exist
rring to exists in one of our public sites built on lemoon i.e. a custom made site (as all sites are). The problem exists in a UserControl that handles form input and is in no way related to the lemoon core product. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18119 - http://www.osvdb.org/21820 - http://pridels0.blogspot.com/2005/12/lemoon-xss-vuln.html - http://www.securityfocus.com/bid/15949
CVE ID: CVE-2005-4399 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search/index.php in Libertas Enterprise CMS 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page_search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18117 - http://pridels0.blogspot.com/2005/12/libertas-enterprise-cms-xss-vuln.html - http://www.osvdb.org/21819 - http://www.securityfocus.com/bid/15950
CVE ID: CVE-2005-4400 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:05.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in downloads/portal_ent in Liferay Portal Enterprise 3.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) _77_struts_action, (2) p_p_mode, and (3) p_p_state parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18116 - http://pridels0.blogspot.com/2005/12/liferay-portal-enterprise-361-xss.html - http://www.osvdb.org/21812 - http://www.securityfocus.com/bid/15951
CVE ID: CVE-2005-4401 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Lutece 1.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15953 - http://pridels0.blogspot.com/2005/12/lutece-xss-vuln.html - http://secunia.com/advisories/18114 - http://www.osvdb.org/21813
CVE ID: CVE-2005-4402 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MailEnable Professional 1.71 and earlier, and Enterprise 1.1 and earlier, allows remote authenticated users to execute arbitrary code via a long IMAP EXAMINE command. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/alerts/2005/Dec/1015378.html - http://www.vupen.com/english/advisories/2005/2988 - http://marc.info/?l=full-disclosure&m=113502692010867&w=2 - http://www.mailenable.com/hotfix/
CVE ID: CVE-2005-4403 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the show parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18099 - http://pridels0.blogspot.com/2005/12/marwel-sql-inj.html - http://www.securityfocus.com/bid/15959 - http://www.osvdb.org/21831
CVE ID: CVE-2005-4404 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in Media2 CMS Shop 18.x allows remote attackers to execute arbitrary SQL commands via the item parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21846 - http://secunia.com/advisories/18079
CVE ID: CVE-2005-4405 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: redqueen.cgi in Red Queen 1.02 and earlier allows remote attackers to obtain the full server path via invalid (1) yellowpage_id, (2) skin_id, (3) supplier_id, and (4) module parameters, which leaks the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/red-queen-path-disclosure.html - http://secunia.com/advisories/18072 - http://www.vupen.com/english/advisories/2005/2969
CVE ID: CVE-2005-4406 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:05.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.cfm in Mercury CMS 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21862 - http://pridels0.blogspot.com/2005/12/mercury-cms-vuln.html - http://www.securityfocus.com/bid/15967
CVE ID: CVE-2005-4407 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.cfm in Mercury CMS 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) content and (2) criteria parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/mercury-cms-vuln.html - http://www.osvdb.org/21863
CVE ID: CVE-2005-4408 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Miraserver 1.0 RC4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php, (2) id parameter to newsitem.php, and (3) cat parameter to article.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21836 - http://secunia.com/advisories/18110 - http://www.osvdb.org/21837 - http://www.securityfocus.com/bid/15960 - http://pridels0.blogspot.com/2005/12/miraserver-sql-vuln.html - http://www.osvdb.org/21
ww.securityfocus.com/bid/15960 - http://pridels0.blogspot.com/2005/12/miraserver-sql-vuln.html - http://www.osvdb.org/21838
CVE ID: CVE-2005-4409 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MMBase 1.7.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/mmbase-xss-vuln.html - http://www.securityfocus.com/bid/15955 - http://www.osvdb.org/21868
CVE ID: CVE-2005-4410 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in NQcontent 3 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the text parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21829 - http://www.securityfocus.com/bid/15989 - http://secunia.com/advisories/17994 - http://pridels0.blogspot.com/2005/12/nqcontent-v3-xss-vuln.html
CVE ID: CVE-2005-4411 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via a long request to TCP port 105. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1375 - http://www.securityfocus.com/bid/16396 - http://securitytracker.com/id?1015374 - http://www.osvdb.org/22103 - http://secunia.com/advisories/18611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23669
CVE ID: CVE-2005-4412 State: PUBLISHED Published: 2005-12-20T11:00:00Z Last Updated: 2024-09-16T20:17:06.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Program Neighborhood client before 9.150 caches the user password in plaintext in the GUI while asterisks are used to visually obfuscate the password, which allows attackers with access to the session to obtain the password by using a tool to directly access the field. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015372 - http://support.citrix.com/article/CTX108108
CVE ID: CVE-2005-4413 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in sample scripts in IBM WebSphere Application Server 6 allow remote attackers to inject arbitrary web script or HTML via the (1) E-mail address field to (a) PlantsByWebSphere/login.jsp, (2) message field to (b) TechnologySample/BulletinBoard Script, (3) Email address field to (c) TechnologySamples/Subscription, and the (4) Movie Name, (5) Movie Reviewer, and (6) Movie Review fields to (d) TechnologySamples/MovieReview2_1. Additional Analyst Notes: - CVE Program Container: Re
d (6) Movie Review fields to (d) TechnologySamples/MovieReview2_1. Additional Analyst Notes: - CVE Program Container: References: - http://www.ipomonis.com/advisories/ibm_css.txt - http://securitytracker.com/id?1015360 - http://www.securityfocus.com/bid/15929
CVE ID: CVE-2005-4414 State: PUBLISHED Published: 2005-12-20T11:00:00Z Last Updated: 2024-09-16T18:28:36.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Teamwork 3 before alpha 1.7 has unknown impact and attack vectors, related to "a menu security bug." Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21745 - http://freshmeat.net/projects/teamwork/?branch_id=57178&release_id=214639
CVE ID: CVE-2005-4415 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in TML CMS 0.5 allows remote attackers to inject arbitrary web script or HTML via the form parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0512-exploits/ztml.txt - http://www.osvdb.org/22076 - http://www.osvdb.org/21801 - http://www.securityfocus.com/bid/15876
CVE ID: CVE-2005-4416 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:04.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0512-exploits/ztml.txt - http://www.osvdb.org/22075 - http://www.osvdb.org/21802 - http://www.securityfocus.com/bid/15876
CVE ID: CVE-2005-4417 State: PUBLISHED Published: 2005-12-20T11:00:00 Last Updated: 2024-08-07T23:46:05.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Widcomm Bluetooth for Windows (BTW) 4.0.1.1500 and earlier, as installed on Belkin Bluetooth Software 1.4.2 Build 10 and ANYCOM Blue USB-130-250 Software 4.0.1.1500, and possibly other devices, sets null Authentication and Authorization values, which allows remote attackers to send arbitrary audio and possibly eavesdrop using the microphone via the Hands Free Audio Gateway and Headset profile. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/41