Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-3942 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in knowledgebase-control.php in Orca Knowledgebase 2.1b and earlier allows remote attackers to execute arbitrary SQL commands via the qid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17805 - http://www.osvdb.org/21198 - http://www.securityfocus.com/bid/15637 - http://pridels0.blogspot.com/2005/11/orca-knowledgebase-sql-vuln.html - http://www.vupen.com/english/advisories/2005/2642 - http://www.greywyvern.com/orca#know
CVE ID: CVE-2005-3943 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ilyav FAQ System 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) FAQ_ID and (2) action parameters in (a) viewFAQ.php; and (3) CATEGORY_ID parameter in (b) index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15640 - http://pridels0.blogspot.com/2005/11/faq-system-11-sql-inj-vuln.html - http://secunia.com/advisories/17801 - http://www.vupen.com/english/advisories/2005/2653 - http://www.osvdb.or
uln.html - http://secunia.com/advisories/17801 - http://www.vupen.com/english/advisories/2005/2653 - http://www.osvdb.org/21202
CVE ID: CVE-2005-3944 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in survey.php in ilyav Survey System 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the SURVEY_ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17800 - http://pridels0.blogspot.com/2005/11/survey-system-11-sql-inj-vuln.html - http://www.securityfocus.com/bid/15641 - http://www.vupen.com/english/advisories/2005/2654 - http://www.osvdb.org/21200
CVE ID: CVE-2005-3945 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service (CPU consumption) via a flood of SYN packets that produce identical hash values, which slows down the hash table lookups. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15613 - http://www.securityfocus.com/archive/1/417952/100/0/threaded
CVE ID: CVE-2005-3946 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 8.50 allows remote attackers to cause a denial of service (crash) via a Java applet with a large string argument to the removeMember JNI method for the com.opera.JSObject class. Additional Analyst Notes: - CVE Program Container: References: - http://www.illegalaccess.org/exploit/opera85/OperaApplet.html - http://www.securityfocus.com/bid/15648 - http://www.securityfocus.com/archive/1/418201/100/0/threaded - http://www.securityfocus.com/archive/1/418274/100/0/threaded
CVE ID: CVE-2005-3947 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in PHP Upload Center allows remote attackers to read arbitrary files via "../" sequences in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.blogcu.com/Liz0ziM/126975 - http://liz0.3yr.net/phpuploadcenter.txt - http://www.securityfocus.com/bid/15626 - http://www.securityfocus.com/bid/15621 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24696
CVE ID: CVE-2005-3948 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the (1) cmd and (2) var1 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15651 - http://www.phpalbum.net/dw - http://pridels0.blogspot.com/2005/11/phpalbum-local-file-include-vuln.html - http://www.osvdb.org/21410
CVE ID: CVE-2005-3949 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) startid parameter to activity_log.php, (2) startid parameter to admin_handler.php, (3) template parameter to edit_template.php, and (4) multiple parameters to export_handler.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17784 - http://www.securityfocus.com/archive/1/418286/100/0/threaded - http://www.securityfocus.com/archive/1/417900/100/0/thread
ttp://www.securityfocus.com/archive/1/418286/100/0/threaded - http://www.securityfocus.com/archive/1/417900/100/0/threaded - http://www.osvdb.org/21219 - http://secunia.com/advisories/19240 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23369 - http://www.osvdb.org/21218 - http://www.osvdb.org/21217 - http://www.vupen.com/english/advisories/2005/2643 - http://securityreason.com/securityalert/215 - http://www.osvdb.org/21216 - http://www.ush.it/2005/11/28/webcalendar-multiple-vulnerabilities - http://sourceforge.net/forum/forum.php?thread_id=1392833&forum_id=11587 - http://www.securityfocus.com/bid/15608 - http://www.securityfocus.com/bid/15662 - http://www.debian.org/security/2006/ds
http://www.securityfocus.com/bid/15608 - http://www.securityfocus.com/bid/15662 - http://www.debian.org/security/2006/dsa-1002 - http://www.securityfocus.com/bid/15606
CVE ID: CVE-2005-3950 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: nuauth in NuFW 1.0.x before 1.0.16 and 1.1 allows authenticated users to cause a denial of service via malformed packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15645 - http://www.nufw.org/+NUFW-1-16-minor-security-fix+.html - http://www.vupen.com/english/advisories/2005/2647 - http://secunia.com/advisories/17754
CVE ID: CVE-2005-3951 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in survey.php in PHP Labs Survey Wizard allows remote attackers to execute arbitrary SQL commands via the sid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/11/survey-wizard-sid-sql-injection-vuln.html - http://www.osvdb.org/21104 - http://secunia.com/advisories/17686 - http://www.vupen.com/english/advisories/2005/2553
CVE ID: CVE-2005-3952 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:49.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) type parameters to viewcat.php, or (3) certain search parameters. NOTE: later a disclosure reported the affected version as 1.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2552 - https://www.exploit-db.com/exploits/3456 - http://www.securityfocus.com/bid/15547 - http://pridels0.blogspot.com/2005/11/top-auction-multiple-sql-v
exploits/3456 - http://www.securityfocus.com/bid/15547 - http://pridels0.blogspot.com/2005/11/top-auction-multiple-sql-vuln.html - http://www.securityfocus.com/archive/1/466565/100/200/threaded - http://www.osvdb.org/21106 - http://secunia.com/advisories/17687 - http://www.osvdb.org/21105 - http://www.securityfocus.com/archive/1/466569/100/200/threaded
CVE ID: CVE-2005-3953 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Bedeng PSP 1.1 allows remote attackers to execute arbitrary SQL commands via the cwhere parameter to (1) index.php and (2) download.php, or (3) ckode parameter to baca.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15583 - http://secunia.com/advisories/17760 - http://www.osvdb.org/21175 - http://www.osvdb.org/21176 - http://www.osvdb.org/21174 - http://pridels0.blogspot.com/2005/11/bedengpsp-sql-inj-vuln.html
CVE ID: CVE-2005-3954 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in blogBuddies 0.3 allows remote attackers to inject arbitrary web script or HTML via the u parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/tracker/index.php?func=detail&aid=1366743&group_id=127552&atid=708847 - http://sourceforge.net/forum/forum.php?forum_id=514600 - http://secunia.com/advisories/17741 - http://securitytracker.com/id?1015264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23331 - http://www.security
http://securitytracker.com/id?1015264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23331 - http://www.securityfocus.com/bid/15555 - http://www.osvdb.org/21111 - http://www.vupen.com/english/advisories/2005/2586
CVE ID: CVE-2005-3955 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MagpieRSS 7.1, as used in (a) blogBuddiesv 0.3, (b) Jaws 0.6.2, and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to (a) magpie_debug.php and (2) rss_url parameter to (b) magpie_slashbox.php and (c) simple_smarty.php. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/JAWS_062_sql.html - http://sourceforge.net/tracker/index.php?func=detail&aid=1366743&group_id=12
retrogod.altervista.org/JAWS_062_sql.html - http://sourceforge.net/tracker/index.php?func=detail&aid=1366743&group_id=127552&atid=708847 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27337 - http://secunia.com/advisories/20842 - http://seclists.org/fulldisclosure/2015/May/35 - http://secunia.com/advisories/17741 - http://securitytracker.com/id?1015264 - http://www.jaws-project.com/index.php?blog/show/29 - http://www.osvdb.org/21113 - http://www.securityfocus.com/bid/15555 - http://www.securityfocus.com/archive/1/438434/100/0/threaded - http://www.osvdb.org/21112 - http://www.vupen.com/english/advisories/2006/2546 - http://www.osvdb.org/21643 - http://www.securityfocus.com/bid/18665
CVE ID: CVE-2005-3956 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in DMANews 0.904 and 0.910 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in a comments action and the (2) sortorder and (3) display_num parameters in a news_list action. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/11/dmanews-multiple-sql-inj-vuln.html - http://www.osvdb.org/21165 - http://secunia.com/advisories/17759 - http://www.securityfocus.com/bid/15628
CVE ID: CVE-2005-3957 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Trackback functionality in DotClear 1.2.1 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15624 - http://www.dotclear.net/forum/viewtopic.php?id=12895 - http://secunia.com/advisories/17769
CVE ID: CVE-2005-3958 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Entergal MX 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) idcat parameter in a showcat action and (2) the action parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23262 - http://secunia.com/advisories/17753 - http://www.securityfocus.com/bid/15631 - http://pridels0.blogspot.com/2005/11/entergal-mx-v20-sql-vuln.html - http://www.osvdb.org/21164 - http://www.vupen.com/english/advi
els0.blogspot.com/2005/11/entergal-mx-v20-sql-vuln.html - http://www.osvdb.org/21164 - http://www.vupen.com/english/advisories/2005/2626
CVE ID: CVE-2005-3959 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:49.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FreeWebStat 1.0 rev37 allow remote attackers to inject arbitrary web script or HTML via the (1) site, (2) jsref, (3) jsres, and (4) jscolor parameters to pixel.php, which are not sanitized before being included in the logdb.html file, and (5) the search key to stat.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23391 - http://secunia.com/advisories/17783 - http://www.securityfocus.com/archive/1/417
ce.ibmcloud.com/vulnerabilities/23391 - http://secunia.com/advisories/17783 - http://www.securityfocus.com/archive/1/417902/100/0/threaded - http://securitytracker.com/id?1015301 - http://www.vupen.com/english/advisories/2005/2646 - http://www.securityfocus.com/bid/15601 - http://www.freewebstat.com/changelog-english.html - http://www.osvdb.org/21207 - http://www.ush.it/2005/11/25/free-web-stat/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/23387
CVE ID: CVE-2005-3960 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kadu 0.4.2 and 0.5.0pre allows remote attackers to cause a denial of service (crash or generated traffic) via a malformed message, possibly with incomplete information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/417920/100/0/threaded - http://www.securityfocus.com/bid/15620 - http://www.osvdb.org/21215 - http://secunia.com/advisories/17764 - http://www.vupen.com/english/advisories/2005/2648 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23258
CVE ID: CVE-2005-3961 State: PUBLISHED Published: 2005-12-01T11:00:00 Last Updated: 2024-08-07T23:31:48.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: export_handler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17784 - http://www.securityfocus.com/archive/1/417900/100/0/threaded - http://secunia.com/advisories/19240 - http://www.vupen.com/english/advisories/2005/2643 - http://securityreason.com/securityalert/215 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23370 - http://www.ush.it/2005/11/28/webcalendar
ecurityalert/215 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23370 - http://www.ush.it/2005/11/28/webcalendar-multiple-vulnerabilities - http://sourceforge.net/forum/forum.php?thread_id=1392833&forum_id=11587 - http://www.securityfocus.com/bid/15608 - http://www.osvdb.org/21220 - http://www.debian.org/security/2006/dsa-1002
CVE ID: CVE-2005-3962 State: PUBLISHED Published: 2005-12-01T17:00:00 Last Updated: 2024-08-07T23:31:48.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4750 - https://oval.cisecurity.org/repository/search/def
ner: References: - http://www.vupen.com/english/advisories/2006/4750 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1074 - http://www.kb.cert.org/vuls/id/948385 - http://www.osvdb.org/22255 - http://secunia.com/advisories/17941 - http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm - http://www.securityfocus.com/archive/1/418333/100/0/threaded - http://www.securityfocus.com/archive/1/438726/100/0/threaded - http://marc.info/?l=full-disclosure&m=113342788118630&w=2 - http://www.vupen.com/english/advisories/2005/2688 - http://www.dyadsecurity.com/perl-0002.html - http://www.osvdb.org/21345 - http://www.securityfocus.com/bid/15629 - http://www.r
www.dyadsecurity.com/perl-0002.html - http://www.osvdb.org/21345 - http://www.securityfocus.com/bid/15629 - http://www.redhat.com/support/errata/RHSA-2005-881.html - http://docs.info.apple.com/article.html?artnum=304829 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10598 - http://www.debian.org/security/2006/dsa-943 - http://www.openbsd.org/errata37.html#perl - http://secunia.com/advisories/17993 - http://secunia.com/advisories/18075 - https://www.redhat.com/archives/fedora-legacy-announce/2006-February/msg00008.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056 - http://www.openpkg.org/security/OpenPKG-SA-2005.025-perl.html - h
o.conectiva.com.br/atualizacoes/?id=a&anuncio=001056 - http://www.openpkg.org/security/OpenPKG-SA-2005.025-perl.html - http://www.securityfocus.com/archive/1/438726/100/0/threaded - http://www.vupen.com/english/advisories/2006/0771 - ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U - http://secunia.com/advisories/20894 - https://usn.ubuntu.com/222-1/ - http://www.vupen.com/english/advisories/2006/2613 - http://secunia.com/advisories/18413 - http://secunia.com/advisories/23155 - http://secunia.com/advisories/17762 - http://secunia.com/advisories/18187 - http://www.trustix.org/errata/2005/0070 - http://secunia.com/advisories/18517 - http://secunia.com/advisories/18295 - htt
ttp://www.trustix.org/errata/2005/0070 - http://secunia.com/advisories/18517 - http://secunia.com/advisories/18295 - http://www.novell.com/linux/security/advisories/2005_71_perl.html - http://secunia.com/advisories/18183 - http://www.redhat.com/support/errata/RHSA-2005-880.html - ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/001_perl.patch - http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html - http://www.us-cert.gov/cas/techalerts/TA06-333A.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102192-1 - http://secunia.com/advisories/17952 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:225 - http://www.ipcop.org/index.php?name=News&file=a
7952 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:225 - http://www.ipcop.org/index.php?name=News&file=article&sid=41 - ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/007_perl.patch - http://www.gentoo.org/security/en/glsa/glsa-200512-01.xml - http://secunia.com/advisories/31208 - http://secunia.com/advisories/17802 - http://www.novell.com/linux/security/advisories/2005_29_sr.html - http://secunia.com/advisories/19041 - http://secunia.com/advisories/17844
CVE ID: CVE-2005-3963 State: PUBLISHED Published: 2005-12-02T00:00:00 Last Updated: 2024-08-07T23:31:48.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL commands via the dc_xd parameter in a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21333 - http://secunia.com/advisories/17830 - http://www.zone-h.org/advisories/read/id=8485 - http://www.vupen.com/english/advisories/2005/2677 - http://www.securityfocus.com/bid/15667 - http://www.dotclear.net/forum/viewtopic.php?id=13876 - http://archives.neohapsis.com/archives/fu
tyfocus.com/bid/15667 - http://www.dotclear.net/forum/viewtopic.php?id=13876 - http://archives.neohapsis.com/archives/fulldisclosure/2005-11/1052.html
CVE ID: CVE-2005-3964 State: PUBLISHED Published: 2005-12-02T11:00:00 Last Updated: 2024-08-07T23:31:48.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in libUil (libUil.so) in OpenMotif 2.2.3, and possibly other versions, allows attackers to execute arbitrary code via the (1) diag_issue_diagnostic function in UilDiags.c and (2) open_source_file function in UilSrcSrc.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2006-0272.html - http://www.securityfocus.com/archive/1/418459/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9393 - http
8459/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9393 - http://securitytracker.com/id?1015303 - http://marc.info/?l=full-disclosure&m=113349242925897&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23389 - http://www.vupen.com/english/advisories/2005/2709 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23388 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://www.securityfocus.com/bid/15686 - http://www.securityfocus.com/bid/15684
CVE ID: CVE-2005-3965 State: REJECTED Published: 2005-12-02T18:00:00Z Last Updated: 2024-09-17T00:51:06.146Z Description: No description available.
CVE ID: CVE-2005-3966 State: PUBLISHED Published: 2005-12-03T19:00:00 Last Updated: 2024-08-07T23:31:48.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.jsp in Java Search Engine (JSE) 0.9.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/jse-xss-vuln.html - http://secunia.com/advisories/17834 - http://www.vupen.com/english/advisories/2005/2690 - http://www.osvdb.org/21376 - http://www.securityfocus.com/bid/15687
CVE ID: CVE-2005-3967 State: PUBLISHED Published: 2005-12-03T19:00:00 Last Updated: 2024-08-07T23:31:48.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the dosearchsite.action module in Atlassian Confluence 2.0.1 Build 321 allows remote attackers to inject arbitrary web script or HTML via the searchQuery.queryString search module parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15688 - http://www.osvdb.org/21377 - http://secunia.com/advisories/17833 - http://www.vupen.com/english/advisories/2005/2691 - http://pridels0.blogspot.com/2005/12/confluence-enterprise-wiki-xss-vuln
://www.vupen.com/english/advisories/2005/2691 - http://pridels0.blogspot.com/2005/12/confluence-enterprise-wiki-xss-vuln.html