Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-4622 State: PUBLISHED Published: 2006-01-06T11:00:00Z Last Updated: 2024-09-16T18:39:26.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in eFileGo 3.01 allows remote attackers to execute arbitrary code, read arbitrary files, and upload arbitrary files via a ... (triple dot) in (1) the URL on port 608 and (2) the argument to upload.exe. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015430 - http://www.securityfocus.com/bid/16124 - http://www.osvdb.org/22151 - http://www.ipomonis.com/advisories/PaQFile_Share.txt - http://secunia.com/advisories/18279
CVE ID: CVE-2005-4623 State: PUBLISHED Published: 2006-01-06T11:00:00Z Last Updated: 2024-09-16T18:38:52.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: upload.exe in eFileGo 3.01 allows remote attackers to cause a denial of service (CPU consumption) via an argument with an invalid directory name. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015430 - http://www.securityfocus.com/bid/16124 - http://www.osvdb.org/22152 - http://www.ipomonis.com/advisories/PaQFile_Share.txt - http://secunia.com/advisories/18279
CVE ID: CVE-2005-4624 State: PUBLISHED Published: 2006-01-06T11:00:00Z Last Updated: 2024-09-16T18:29:00.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: The m_join function in channel.c for PTnet ircd 1.5 and 1.6 allows remote attackers to cause a denial of service (memory exhaustion that triggers a daemon restart) via a large number of requests to join a "charmed channel" such as PTnet, #PTnoticias and #*.log, which causes ircd to open the channel even though it does not have any valid users. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1476.html - http://www.securityfocus.com/bid/16089 - http:
http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1476.html - http://www.securityfocus.com/bid/16089 - http://securitytracker.com/id?1015425
CVE ID: CVE-2005-4625 State: PUBLISHED Published: 2006-01-06T11:00:00 Last Updated: 2024-08-07T23:53:28.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drivers for certain display adapters, including (1) an unspecified ATI driver and (2) an unspecified Intel driver, might allow remote attackers to cause a denial of service (system crash) via a large JPEG image, as demonstrated in Internet Explorer using stoopid.jpg with a width and height of 9999999. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/420847/100/0/threaded - http://www.securityfocus.com/archive/1/420947/100/0/threaded - http://www.securityfocus.com/archive/1
7/100/0/threaded - http://www.securityfocus.com/archive/1/420947/100/0/threaded - http://www.securityfocus.com/archive/1/420930/100/0/threaded
CVE ID: CVE-2005-4626 State: PUBLISHED Published: 2006-01-06T11:00:00 Last Updated: 2024-08-07T23:53:28.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Recruitment Software installs admin/site.xml under the web document root with insufficient access control, which might allow remote attackers to obtain sensitive information (MySQL database credentials) via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/420700/100/0/threaded
CVE ID: CVE-2005-4627 State: PUBLISHED Published: 2006-01-06T11:00:00 Last Updated: 2024-08-07T23:53:28.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in (1) GmailSite 1.0 through 1.0.4 and (2) GFHost 0.1.1 through 0.4.2 allows remote attackers to inject arbitrary web script or HTML via the lng parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16081 - http://lostmon.blogspot.com/2005/12/gmailsite-variable-cross-site.html - http://www.osvdb.org/22083 - http://foros.ojobuscador.com/tema1936.html - http://secunia.com/advisories/18155 - https://exchange.xforce.ibmclou
083 - http://foros.ojobuscador.com/tema1936.html - http://secunia.com/advisories/18155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23912
CVE ID: CVE-2005-4628 State: PUBLISHED Published: 2006-01-07T01:00:00 Last Updated: 2024-08-07T23:53:28.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in HelpDeskPoint 2.38 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/11/helpdeskpoint-free-help-desk-software.html - http://www.osvdb.org/21318
CVE ID: CVE-2005-4629 State: PUBLISHED Published: 2006-01-07T01:00:00 Last Updated: 2024-08-07T23:53:27.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SMBCMS 2.1 allows remote attackers to execute arbitrary SQL commands via unspecified search parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21314 - http://pridels0.blogspot.com/2005/11/smbcms-v21-sql-injection.html
CVE ID: CVE-2005-4630 State: PUBLISHED Published: 2006-01-07T01:00:00 Last Updated: 2024-08-07T23:53:28.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in ClientExec 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) billshowid, (2) billdetailid, (3) fuse, and (4) frmClientID parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.clientexec.com/forum/showthread.php?t=8006 - http://www.osvdb.org/21163 - http://www.ce-talk.com/showthread.php?t=653 - http://pridels0.blogspot.com/2005/11/clientexec-2x-multiple-sql-inj.html - http://secunia.com/advisories/17756 - https://exchange.xforc
.blogspot.com/2005/11/clientexec-2x-multiple-sql-inj.html - http://secunia.com/advisories/17756 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23271 - http://www.vupen.com/english/advisories/2005/2628
CVE ID: CVE-2005-4631 State: PUBLISHED Published: 2006-01-07T01:00:00 Last Updated: 2024-08-07T23:53:28.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Zina 0.12.07 and earlier allows remote attackers to execute arbitrary SQL commands via the p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21306 - http://pridels0.blogspot.com/2005/11/zina-sql-injection-vulnerability.html
CVE ID: CVE-2005-4632 State: PUBLISHED Published: 2006-01-07T01:00:00 Last Updated: 2024-08-07T23:53:28.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in poll_frame.php in Vote! Pro 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the poll_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21309 - http://pridels0.blogspot.com/2005/11/vote-pro-4x-pollid-sql-inj.html
CVE ID: CVE-2005-4633 State: REJECTED Published: 2006-01-09T11:00:00 Last Updated: 2006-07-03T09:00:00 Description: No description available.
CVE ID: CVE-2005-4634 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T23:53:28.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in ActiveCampaign SupportTrio 1.4 allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: the provenance of this information is unknown because the source URL is not available; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/11/activecampaign-supporttrio-sql-inj.html - http://www.osvdb.org/21319
CVE ID: CVE-2005-4635 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T23:53:28.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nl_fib_input function in fib_frontend.c in the Linux kernel before 2.6.15 does not check for valid lengths of the header and payload, which allows remote attackers to cause a denial of service (invalid memory reference) via malformed fib_lookup netlink messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ea86575eaf99a9262a969309d934318028dbfacb - http://secunia.com/advisories/18788 - http://www.kernel.org/pub/linux/ker
3Bh=ea86575eaf99a9262a969309d934318028dbfacb - http://secunia.com/advisories/18788 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15 - http://www.novell.com/linux/security/advisories/2006_06_kernel.html - http://www.vupen.com/english/advisories/2006/0035 - http://secunia.com/advisories/18216 - http://www.securityfocus.com/bid/16139
CVE ID: CVE-2005-4636 State: PUBLISHED Published: 2006-01-09T23:00:00 Last Updated: 2024-08-07T23:53:28.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenOffice.org 2.0 and earlier, when hyperlinks has been disabled, does not prevent the user from clicking the WWW-browser button in the Hyperlink dialog, which makes it easier for attackers to trick the user into bypassing intended security settings. Additional Analyst Notes: - CVE Program Container: References: - http://qa.openoffice.org/issues/show_bug.cgi?id=53491 - http://securitytracker.com/id?1015419 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:033
CVE ID: CVE-2005-4637 State: PUBLISHED Published: 2006-01-09T23:00:00 Last Updated: 2024-08-07T23:53:28.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) nav parameter in the downloads module, (2) Full Name and (3) Email fields in the core module, (4) Full Name, (5) Email, and (6) Subject fields in the tickets module, or (7) Registered Email field in the lostpassword feature in the core module. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/kaya
core module. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/kayako-supportsuite-multiple-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/23916 - http://www.securityfocus.com/bid/16094 - http://www.osvdb.org/22224 - http://www.osvdb.org/22225
CVE ID: CVE-2005-4638 State: PUBLISHED Published: 2006-01-09T23:00:00 Last Updated: 2024-08-07T23:53:27.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to obtain the full path via (1) _a and (2) newsid parameters in the news module, (3) downloaditemid parameter in the downloads module, and (4) kbarticleid parameter in the knowledgebase module. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/kayako-supportsuite-multiple-vuln.html - http://www.osvdb.org/22226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23917
CVE ID: CVE-2005-4639 State: PUBLISHED Published: 2006-01-10T11:00:00 Last Updated: 2024-08-07T23:53:28.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the CA-driver (dst_ca.c) for TwinHan DST Frontend/Card in Linux kernel 2.6.12 and other versions before 2.6.15 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by "reading more than 8 bytes into an 8 byte long array". Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43323 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/43323 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15 - http://www.vupen.com/english/advisories/2006/0035 - http://secunia.com/advisories/18216 - http://www.securityfocus.com/bid/16142 - https://usn.ubuntu.com/244-1/ - http://secunia.com/advisories/18527
CVE ID: CVE-2005-4640 State: PUBLISHED Published: 2006-01-10T11:00:00 Last Updated: 2024-08-07T23:53:28.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in class-1 Poll Software 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) pollid or (2) previouspoll parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21241 - http://pridels0.blogspot.com/2005/11/class-1-poll-software-multiple-sql.html
CVE ID: CVE-2005-4641 State: PUBLISHED Published: 2006-01-10T11:00:00 Last Updated: 2024-08-07T23:53:28.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in home.php in eazyCMS 2.0 allows remote attackers to execute arbitrary SQL commands via the page_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21240 - http://pridels0.blogspot.com/2005/11/eazycms-pageid-sql-injection.html
CVE ID: CVE-2005-4642 State: PUBLISHED Published: 2006-01-10T21:00:00 Last Updated: 2024-08-07T23:53:28.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to (1) search.php, (2) members.php, (3) stats.php, (4) viewforum.php, (5) register.php, (6) usercp.php, (7) groups.php, (8) pms.php, and (9) calendar.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21298 - http://pridels0.blogspot.com/2005/11/xss-in-hydrobb.html - http://www.osvdb.org/21295 - http://www.osvdb.org/21296 - http://w
//pridels0.blogspot.com/2005/11/xss-in-hydrobb.html - http://www.osvdb.org/21295 - http://www.osvdb.org/21296 - http://www.vupen.com/english/advisories/2005/2562 - http://www.osvdb.org/21301 - http://www.osvdb.org/21294 - http://www.osvdb.org/21300 - http://www.osvdb.org/21297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23299 - http://www.osvdb.org/21293 - http://www.osvdb.org/21299
CVE ID: CVE-2005-4643 State: PUBLISHED Published: 2006-01-10T21:00:00 Last Updated: 2024-08-07T23:53:28.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Antharia OnContent // CMS allows remote attackers to execute arbitrary SQL commands via the pid parameter. NOTE: it is not clear, but this might be an application service provider, in which case it might be excluded from CVE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23072 - http://www.osvdb.org/20888 - http://secunia.com/advisories/17596 - http://osvdb.org/ref/20/2088
/vulnerabilities/23072 - http://www.osvdb.org/20888 - http://secunia.com/advisories/17596 - http://osvdb.org/ref/20/20888-oncontent-sql.txt
CVE ID: CVE-2005-4644 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T23:53:28.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18555 - http://trac.edgewall.org/ticket/2473 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24183 - http://secunia.com/advisories/18465 - http://projects.edgewall.com/trac/ticket/2473 - http://www.vupen.com/english/advisories
//secunia.com/advisories/18465 - http://projects.edgewall.com/trac/ticket/2473 - http://www.vupen.com/english/advisories/2006/0226 - http://www.securityfocus.com/bid/16198 - http://www.debian.org/security/2006/dsa-951
CVE ID: CVE-2005-4645 State: PUBLISHED Published: 2006-01-11T21:00:00Z Last Updated: 2024-09-17T01:36:12.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in 3CFR allows remote attackers to execute arbitrary SQL commands via the LangueID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20832 - http://hackers.by.lv/showthread.php?p=408 - http://osvdb.org/ref/20/20832-3CFR-sql.txt
CVE ID: CVE-2005-4646 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T23:53:28.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in index.php in PEARLINGER Pearl Forums 2.4 allows remote attackers to include arbitrary files via the mode parameter, possibly due to a directory traversal vulnerability. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20849 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23196 - http://www.securityfocus.com/bid/15433 - http://www.vupen.com/en
://exchange.xforce.ibmcloud.com/vulnerabilities/23196 - http://www.securityfocus.com/bid/15433 - http://www.vupen.com/english/advisories/2005/2426 - http://secunia.com/advisories/17533
CVE ID: CVE-2005-4647 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T23:53:28.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PEARLINGER Pearl Forums 2.4 allow remote attackers to execute arbitrary SQL commands via the (1) forumsId and (2) topicId parameters in index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15425 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23195 - http://www.osvdb.org/20848 - http://www.vupen.com/english/adv
tps://exchange.xforce.ibmcloud.com/vulnerabilities/23195 - http://www.osvdb.org/20848 - http://www.vupen.com/english/advisories/2005/2426 - http://secunia.com/advisories/17533
CVE ID: CVE-2005-4648 State: PUBLISHED Published: 2006-01-12T11:00:00 Last Updated: 2024-08-07T23:53:28.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Illustrate dBpowerAMP Music Converter 11.5 and earlier, possibly including (1) MusicConverter.exe, (2) playlist.exe, and (3) amp.exe, allows user-assisted attackers to cause a denial of service or execute arbitrary code via a .m3u playlist with a long entry, possibly involving large field names, as demonstrated by SecuBox.Labs.m3u. NOTE: this issue might be the same as the .m3u vulnerability in CVE-2004-1569, but if so, then CD:SF-LOC suggests creating a different identifier since the .m3u issue would affect
y in CVE-2004-1569, but if so, then CD:SF-LOC suggests creating a different identifier since the .m3u issue would affect different versions than the .pls issue. Additional Analyst Notes: - CVE Program Container: References: - http://secubox.shadock.net/dBpowerAMP_Music_Converter_v11.5_Local_Buffer_Overflow_Issue.html - http://securitytracker.com/id?1015415
CVE ID: CVE-2005-4649 State: PUBLISHED Published: 2006-01-13T23:00:00Z Last Updated: 2024-09-16T23:42:25.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Advanced Guestbook 2.2 and 2.3.1 allow remote attackers to inject arbitrary web script or HTML via (1) the entry parameter in index.php and (2) the gb_id parameter in comment.php. NOTE: The index.php/entry vector might be resultant from CVE-2005-1548. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1230.html - http://www.morx.org/guestbook.txt - http://www.osvdb.org/22188
CVE ID: CVE-2005-4650 State: PUBLISHED Published: 2006-01-14T01:00:00Z Last Updated: 2025-01-16T19:56:20.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 1.03 does not restrict the number of "Search" Mambots, which allows remote attackers to cause a denial of service (resource consumption) via a large number of Search Mambots. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.osvdb.org/21041 - http://www.joomla.org/content/view/499/66/ - http://secunia.com/advisories/17675
CVE ID: CVE-2005-4651 State: PUBLISHED Published: 2006-01-14T01:00:00 Last Updated: 2024-08-07T23:53:28.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the pmodule parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/11/epay-pro-pmodule-sql-injection.html - http://www.osvdb.org/21291
CVE ID: CVE-2005-4652 State: PUBLISHED Published: 2006-01-14T01:00:00 Last Updated: 2024-08-07T23:53:28.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PHlyMail 3.02.01 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16310 - http://secunia.com/advisories/18536 - http://www.vupen.com/english/advisories/2006/0261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24238 - http://phlymail.de/forum/viewtopic.php?t=842 - http://www.osvdb.org/20976
CVE ID: CVE-2005-4653 State: PUBLISHED Published: 2006-01-16T21:00:00 Last Updated: 2024-08-07T23:53:28.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ss.php in AL-Caricatier 2.5 and earlier allows remote attackers to bypass login authentication by requesting view_caricatier.php, and then requesting any file in the admin directory with a cookie_username=admin argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22840 - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0483.html - http://www.vupen.com/english/advisories/2005/2181 - http://www.securityfocus.com/b
es/fulldisclosure/2005-10/0483.html - http://www.vupen.com/english/advisories/2005/2181 - http://www.securityfocus.com/bid/15162 - http://secunia.com/advisories/17292
CVE ID: CVE-2005-4654 State: PUBLISHED Published: 2006-01-16T21:00:00 Last Updated: 2024-08-07T23:53:28.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle for OpenView (OfO) 8.1.7, 9.1.01, and 9.2, and OfO for Linux, allow remote attackers to have an unknown impact via unknown attack vectors. NOTE: because of the lack of details in the vendor advisory, it is unclear which set of existing CVEs this advisory might refer to. Additional Analyst Notes: - CVE Program Container: References: - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA01235 - http://secunia.com/advisories/17313 - http://www.vupen.com/english/advisories/2
ce/cki/docDisplay.do?docId=HPSBMA01235 - http://secunia.com/advisories/17313 - http://www.vupen.com/english/advisories/2005/2196
CVE ID: CVE-2005-4655 State: PUBLISHED Published: 2006-01-16T21:00:00 Last Updated: 2024-08-07T23:53:28.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in submit.php in PHP-Fusion 6.0.204 allows remote attackers to inject arbitrary web script or HTML via nested tags in the news_body parameter, as demonstrated by elements such as "<me<meta>ta" and "<sc<script>ript>". Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2192 - http://securityreason.com/securityalert/106 - http://secunia.com/advisories/17312 - http://archives.neohapsis.com/archives/bugtraq/2005-10/0272.html