Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0999 State: PUBLISHED Published: 2005-04-07T04:00:00 Last Updated: 2024-08-07T21:35:59.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Top module for PHP-Nuke 6.x through 7.6 allows remote attackers to execute arbitrary SQL commands via the querylang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111281649616901&w=2 - http://www.waraxe.us/advisory-41.html
CVE ID: CVE-2005-10001 State: PUBLISHED Published: 2022-03-28T20:45:47.000Z Last Updated: 2025-04-15T14:45:26.644Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Netegrity Products: SiteMinder Problem Types: CWE-601 Description: A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The manipulation of the argument target leads to an open redirect. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst No
sed. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.1022
CVE ID: CVE-2005-10002 State: PUBLISHED Published: 2023-10-29T14:31:03.758Z Last Updated: 2024-08-08T00:01:23.456Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: almosteffortless Products: secure-files Plugin Problem Types: CWE-22 Description: A vulnerability, which was classified as critical, was found in almosteffortless secure-files Plugin up to 1.1 on WordPress. Affected is the function sf_downloads of the file secure-files.php. The manipulation of the argument downloadfile leads to path traversal. Upgrading to version 1.2 is able to address this issue. The name of the patch is cab025e5fc2bcdad8032d833ebc38e6bd2a13c92. It is recommended to upgrade the a
ddress this issue. The name of the patch is cab025e5fc2bcdad8032d833ebc38e6bd2a13c92. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-243804. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.243804 - https://vuldb.com/?ctiid.243804 - https://github.com/wp-plugins/secure-files/commit/cab025e5fc2bcdad8032d833ebc38e6bd2a13c92
CVE ID: CVE-2005-10003 State: PUBLISHED Published: 2024-10-17T14:00:16.571Z Last Updated: 2024-10-17T16:13:06.608Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: mikexstudios Products: Xcomic Problem Types: CWE-78 Description: A vulnerability classified as critical has been found in mikexstudios Xcomic up to 0.8.2. This affects an unknown part. The manipulation of the argument cmd leads to os command injection. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 0.8.3 is able to address this i
cult. The exploit has been disclosed to the public and may be used. Upgrading to version 0.8.3 is able to address this issue. The patch is named 6ed8e3cc336e29f09c7e791863d0559939da98bf. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280359 - https://vuldb.com/?ctiid.280359 - http://xcomic.mikexstudios.com/forum/viewtopic.php?id=130 - https://github.com/mikexstudios/xcomic/commit/6ed8e3cc336e29f09c7e791863d0559939da98bf - https://github.com/mikexstudios/xcomic/releases/tag/v0.8.3 - https://web.archive.org/web/20071218144304/http://xcomic.mikexstudios.com/forum/viewtopic.php?id=130
CVE ID: CVE-2005-10004 State: PUBLISHED Published: 2025-08-30T13:45:16.222Z Last Updated: 2025-09-02T20:44:10.062Z Vendors: Raxnet/Ian Berry Products: Cacti Problem Types: CWE-78 Description: Cacti versions prior to 0.8.6-d contain a remote command execution vulnerability in the graph_view.php script. An authenticated user can inject arbitrary shell commands via the graph_start GET parameter, which is improperly handled during graph rendering. This flaw allows attackers to execute commands on the underlying operating system with the privileges of the web server process, potentially compromising system integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.git
entially compromising system integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/cacti_graphimage_exec.rb - https://www.exploit-db.com/exploits/9911 - https://www.exploit-db.com/exploits/16881 - https://www.cacti.net/info/downloads - https://web.archive.org/web/20050305034552/http://www.cacti.net/cactid_download.php - https://www.vulncheck.com/advisories/cacti-graph-view-rce
CVE ID: CVE-2005-1000 State: PUBLISHED Published: 2005-04-07T04:00:00 Last Updated: 2024-08-07T21:35:59.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the bid parameter to the EmailStats op in banners.pgp, (2) the ratenum parameter in the TopRated and MostPopular actions in the Web_Links module, (3) the ttitle parameter in the viewlinkdetails, viewlinkeditorial, viewlinkcomments, and ratelink actions in the Web_Links module, or (4) the username parameter in the Your_Account module. Additional Analyst Notes: - CVE Program Container: Referen
le, or (4) the username parameter in the Your_Account module. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2005-04/0037.html - http://marc.info/?l=bugtraq&m=111263454308478&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19952
CVE ID: CVE-2005-1001 State: PUBLISHED Published: 2005-04-07T04:00:00 Last Updated: 2024-08-07T21:35:59.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1) the Surveys module with the file parameter set to comments or (2) 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2005-04/0037.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19953
CVE ID: CVE-2005-1002 State: PUBLISHED Published: 2005-04-07T04:00:00 Last Updated: 2024-08-07T21:35:59.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: logwebftbs2000.exe in Logics Software File Transfer (LOG-FT) allows remote attackers to read arbitrary files via modified (1) VAR_FT_LANG and (2) VAR_FT_TMPL parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12998 - http://marc.info/?l=bugtraq&m=111271950916436&w=2 - http://secunia.com/advisories/14851
CVE ID: CVE-2005-1003 State: PUBLISHED Published: 2005-04-07T04:00:00 Last Updated: 2024-08-07T21:35:59.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. (dot dot) sequences in the modID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111264602406090&w=2 - http://securitytracker.com/id?1013640 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19954 - http://secunia.com/advisories/14832
CVE ID: CVE-2005-1004 State: PUBLISHED Published: 2005-04-07T04:00:00 Last Updated: 2024-08-07T21:35:59.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in usrdetails.php in ProfitCode PayProCart 3.0 allows remote attackers to inject arbitrary web script or HTML via the sgnuptype parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19955 - http://marc.info/?l=bugtraq&m=111264602406090&w=2 - http://securitytracker.com/id?1013640 - http://secunia.com/advisories/14832
CVE ID: CVE-2005-1005 State: PUBLISHED Published: 2005-04-07T04:00:00 Last Updated: 2024-08-07T21:35:59.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php with hex-encoded .. sequences in the ftoedit parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111264602406090&w=2 - http://securitytracker.com/id?1013640 - http://secunia.com/advisories/14832 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19956
CVE ID: CVE-2005-1006 State: PUBLISHED Published: 2005-04-07T04:00:00 Last Updated: 2024-08-07T21:35:59.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SonicWALL SOHO 5.1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) the user login name, which is not filtered when the administrator views the log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.oliverkarow.de/research/SonicWall.txt - http://secunia.com/advisories/14823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19960 - http://www.osvdb.org/15261 - http://archives.neohapsis.com/archives/
xchange.xforce.ibmcloud.com/vulnerabilities/19960 - http://www.osvdb.org/15261 - http://archives.neohapsis.com/archives/bugtraq/2005-04/0041.html - http://www.securityfocus.com/bid/12984 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19958 - http://securitytracker.com/id?1013638 - http://www.osvdb.org/15262
CVE ID: CVE-2005-1007 State: PUBLISHED Published: 2005-04-07T04:00:00 Last Updated: 2024-08-07T21:35:59.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the LIST functionality in CommuniGate Pro before 4.3c3 allows remote attackers to cause a denial of service (server crash) via certain multipart messages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14604 - http://www.osvdb.org/15257 - http://www.stalker.com/CommuniGatePro/History.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19961
CVE ID: CVE-2005-1008 State: PUBLISHED Published: 2005-04-08T04:00:00Z Last Updated: 2024-09-16T16:28:47.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013614 - http://www.securityfocus.com/bid/12958
CVE ID: CVE-2005-1009 State: PUBLISHED Published: 2005-04-08T04:00:00 Last Updated: 2024-08-07T21:35:59.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or (2) local users to execute arbitrary code via a long Name entry in the configure.cfg file. Additional Analyst Notes: - CVE Program Container: References: - http://www.class101.org/netv-remhbof.pdf - http://secunia.com/advisories/14814 - http://www.hat-squad.com/en/000165.html - http://www.securityfocus.com/archive/1/394801 - http://
com/advisories/14814 - http://www.hat-squad.com/en/000165.html - http://www.securityfocus.com/archive/1/394801 - http://securitytracker.com/id?1013625 - http://www.hat-squad.com/en/000164.html - http://www.class101.org/netv-locsbof.pdf - http://www.securityfocus.com/bid/12967 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19932
CVE ID: CVE-2005-1010 State: PUBLISHED Published: 2005-04-08T04:00:00 Last Updated: 2024-08-07T21:35:59.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject arbitrary web script or HTML via the account username. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013634 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19962 - http://www.securityfocus.com/bid/13000 - http://secunia.com/advisories/14825
CVE ID: CVE-2005-1011 State: PUBLISHED Published: 2005-04-08T04:00:00 Last Updated: 2024-08-07T21:35:59.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in content.asp in SiteEnable allows remote attackers to execute arbitrary SQL commands via the sortby parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013631 - http://www.securityfocus.com/bid/12985 - http://www.zone-h.com/en/advisories/read/id=7367/
CVE ID: CVE-2005-1012 State: PUBLISHED Published: 2005-04-08T04:00:00 Last Updated: 2024-08-07T21:35:59.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Iatek SiteEnable allows remote attackers to inject arbitrary web script or HTML via (1) the contenttype parameter to content.asp, (2) the title, or (3) the description. Additional Analyst Notes: - CVE Program Container: References: - http://www.zone-h.com/en/advisories/read/id=7367/ - http://securitytracker.com/id?1013631 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19891
CVE ID: CVE-2005-1013 State: PUBLISHED Published: 2005-04-08T04:00:00 Last Updated: 2024-08-07T21:35:59.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMTP service in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to cause a denial of service (server crash) via an EHLO command with a Unicode string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19948 - http://securitytracker.com/id?1013637 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19973 - http://www.osvdb.org/15232 - http://marc.info/?l=bugtraq&m=1
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/19973 - http://www.osvdb.org/15232 - http://marc.info/?l=bugtraq&m=111273637518494&w=2 - http://www.mailenable.com/hotfix/ - http://www.securiteam.com/windowsntfocus/5HP031PFFG.html - http://secunia.com/advisories/14812
CVE ID: CVE-2005-1014 State: PUBLISHED Published: 2005-04-08T04:00:00 Last Updated: 2024-08-07T21:35:59.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IMAP service for MailEnable Enterprise 1.04 and earlier and Professional 1.54 allows remote attackers to execute arbitrary code via a long AUTHENTICATE command. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013637 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19947 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-April/033123.html - http://www.mailenable.com/hotfix/ - http://www.securityfocus.com/bid/12995 - http://secunia.com/advisories
033123.html - http://www.mailenable.com/hotfix/ - http://www.securityfocus.com/bid/12995 - http://secunia.com/advisories/14812
CVE ID: CVE-2005-1015 State: PUBLISHED Published: 2005-04-08T04:00:00Z Last Updated: 2024-09-17T00:56:10.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MailEnable Imapd (MEIMAP.exe) allows remote attackers to execute arbitrary code via a long LOGIN command. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2005-April/033144.html
CVE ID: CVE-2005-1016 State: PUBLISHED Published: 2005-04-08T04:00:00 Last Updated: 2024-08-07T21:35:59.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in links_add_form.asp for MaxWebPortal 1.33 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URL in a banner URL. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013617 - http://secunia.com/advisories/14752 - http://www.hackerscenter.com/archive/view.asp?id=1807 - http://www.securityfocus.com/bid/12968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19929
CVE ID: CVE-2005-1017 State: PUBLISHED Published: 2005-04-08T04:00:00 Last Updated: 2024-08-07T21:35:59.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Update_Events function in events_functions.asp in MaxWebPortal 1.33 and earlier allows remote attackers to execute arbitrary SQL commands via the EVENT_ID parameter, as demonstrated using events.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19928 - http://secunia.com/advisories/14752 - http://www.hackerscenter.com/archive/view.asp?id=1807 - http://www.securityfocus.com/bid/1296
nia.com/advisories/14752 - http://www.hackerscenter.com/archive/view.asp?id=1807 - http://www.securityfocus.com/bid/12968
CVE ID: CVE-2005-1018 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticated users to cause a denial of service or execute arbitrary code via an agent request to TCP port 6050 with a large argument before the option field. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111351851802682&w=2 - http://www.securityfocus.com/bid/13102 - http://www.securityfocus.com/archive/1/390760 - http://www.idefense.com/application/poi/display?id=232&typ
m/bid/13102 - http://www.securityfocus.com/archive/1/390760 - http://www.idefense.com/application/poi/display?id=232&type=vulnerabilities
CVE ID: CVE-2005-1019 State: PUBLISHED Published: 2005-04-09T04:00:00 Last Updated: 2024-08-07T21:35:59.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://security-tmp.h14.ru/exploits/23laeon.c.txt - http://marc.info/?l=bugtraq&m=111262942708249&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19951
CVE ID: CVE-2005-1020 State: PUBLISHED Published: 2005-04-09T04:00:00 Last Updated: 2024-08-07T21:35:59.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure Shell (SSH) 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service (device reload) (1) via a username that contains a domain name when using a TACACS+ server to authenticate, (2) when a new SSH session is in the login phase and a currently logged in user issues a send command, or (3) when IOS is logging messages and an SSH session is terminated while the server is sending data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/alerts/2005/Apr/1
data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/alerts/2005/Apr/1013655.html - http://www.securityfocus.com/bid/13043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19989 - http://secunia.com/advisories/14854 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19990 - http://www.cisco.com/warp/public/707/cisco-sa-20050406-ssh.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5455
CVE ID: CVE-2005-1021 State: PUBLISHED Published: 2005-04-09T04:00:00 Last Updated: 2024-08-07T21:35:59.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a TACACS+ server, allows remote attackers to cause a denial of service (memory consumption) via an incorrect username or password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/alerts/2005/Apr/1013655.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19991 - http://www.osvdb.org/15303 - http://www.securityfocus.com/bid/13042 - http://secunia.com/advisories/14854 - http://www.
http://www.osvdb.org/15303 - http://www.securityfocus.com/bid/13042 - http://secunia.com/advisories/14854 - http://www.cisco.com/warp/public/707/cisco-sa-20050406-ssh.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5687
CVE ID: CVE-2005-1022 State: PUBLISHED Published: 2005-04-09T04:00:00 Last Updated: 2024-08-07T21:35:59.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: ColdFusion 6.1 Updater 1 places Java .class files under the web root in the /WEB-INF/cfclasses directory, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.macromedia.com/devnet/security/security_zone/mpsb05-02.html - http://marc.info/?l=bugtraq&m=111290407411801&w=2
CVE ID: CVE-2005-1023 State: PUBLISHED Published: 2005-04-09T04:00:00 Last Updated: 2024-08-07T21:35:59.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x to 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) min parameter to the Search module, (2) the categories parameter to the FAQ module, or (3) the ltr parameter to the Encyclopedia module. NOTE: the bid parameter issue in banners.php is already an item in CVE-2005-1000. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityreason.com/adv/PHPNuke%206.x-7.6-p1.txt - http://marc.info/?l=bugtraq&m=11126345
ainer: References: - http://www.securityreason.com/adv/PHPNuke%206.x-7.6-p1.txt - http://marc.info/?l=bugtraq&m=111263454308478&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19952
CVE ID: CVE-2005-1024 State: PUBLISHED Published: 2005-04-09T04:00:00 Last Updated: 2024-08-07T21:35:59.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) my_headlines, (2) userinfo, or (3) search, which reveals the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityreason.com/adv/PHPNuke%206.x-7.6-p1.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/19953 - http://marc.info/?l=bugtraq&m=111263454308478&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44980
CVE ID: CVE-2005-1025 State: PUBLISHED Published: 2005-04-09T04:00:00 Last Updated: 2024-08-07T21:35:59.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP server in AS/400 4.3, when running in IFS mode, allows remote attackers to obtain sensitive information via a symlink attack using RCMD and the ADDLNK utility, as demonstrated using the QSYS.LIB library. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15300 - http://www.venera.com/downloads/AS400_user_accounts_ftp_disclosure.pdf - http://marc.info/?l=bugtraq&m=111264136829017&w=2