Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0822 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018077 - http://support.citrix.com/kb/entry.jspa?externalID=CTX105762 - http://support.citrix.com/kb/entry.jspa?entryID=5970&categoryID=254 - http://support.citrix.com/article/CTX105800 - http://www.securityfocus.
.com/kb/entry.jspa?entryID=5970&categoryID=254 - http://support.citrix.com/article/CTX105800 - http://www.securityfocus.com/bid/24041
CVE ID: CVE-2005-0823 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12830 - http://securitytracker.com/id?1013458 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19718 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19717 - http://securitytracker.com/id?1013459 - http://secunia.com/advisories/14629
CVE ID: CVE-2005-0824 State: PUBLISHED Published: 2005-03-23T05:00:00 Last Updated: 2024-08-07T21:28:28.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: The internal_dump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is running with the -n option, allows local users to overwrite arbitrary files via a symlink attack on dump files that are triggered by a SIGWINCH signal. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14524 - http://www.mail-archive.com/mathopd%40mathopd.org/msg00272.html
CVE ID: CVE-2005-0825 State: PUBLISHED Published: 2005-03-22T05:00:00 Last Updated: 2024-08-07T21:28:28.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in LTris before 1.0.10 allows local users to execute arbitrary code via a crafted highscores file. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200503-24.xml - http://bugs.gentoo.org/show_bug.cgi?id=85770 - http://secunia.com/advisories/14635 - http://lgames.sourceforge.net/index.php?action=show_news&news_action=show_item&item_id=108
CVE ID: CVE-2005-0826 State: PUBLISHED Published: 2005-03-22T05:00:00 Last Updated: 2024-08-07T21:28:28.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: OllyDbg 1.10 and earlier allows remote attackers to cause a denial of service (application crash) via a dynamic link library (DLL) with a long filename. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19750 - http://securitytracker.com/id?1013478 - http://www.securityfocus.com/bid/12850 - http://marc.info/?l=bugtraq&m=111125734701262&w=2
CVE ID: CVE-2005-0827 State: PUBLISHED Published: 2005-03-22T05:00:00 Last Updated: 2024-08-07T21:28:28.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Viewcat.php in (1) RUNCMS 1.1A, (2) Ciamos 0.9.2 RC1, e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allow remote attackers to obtain sensitive information via an invalid parameter to the convertorderbytrans function, which reveals the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111125588920928&w=2 - http://marc.info/?l=bugtraq&m=111117182417422&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19755 - http://www
p://marc.info/?l=bugtraq&m=111117182417422&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19755 - http://www.ihsteam.com/download/sections/runcms%20advisory%20-%20eng.pdf - http://secunia.com/advisories/14641
CVE ID: CVE-2005-0828 State: PUBLISHED Published: 2005-03-22T05:00:00 Last Updated: 2024-08-07T21:28:28.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: highlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allows remote attackers to read arbitrary PHP files by specifying the pathname in the file parameter, as demonstrated by reading database configuration information from mainfile.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013485 - http://marc.info/?l=bugtraq&m=111125645312693&w=2 - http://www.osvdb.org/14890 - http://www.ihsteam.com/downlo
1013485 - http://marc.info/?l=bugtraq&m=111125645312693&w=2 - http://www.osvdb.org/14890 - http://www.ihsteam.com/download/advisory/Exoops%20highlight%20hole.txt - http://www.securityfocus.com/bid/12848 - http://secunia.com/advisories/14648 - http://marc.info/?l=bugtraq&m=111117241923006&w=2 - http://www.ihsteam.com/download/sections/runcms%20advisory%20-%20eng.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/19754 - http://secunia.com/advisories/14641
CVE ID: CVE-2005-0829 State: PUBLISHED Published: 2005-03-22T05:00:00 Last Updated: 2024-08-07T21:28:28.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attackers to inject arbitrary web script or HTML via the (1) user_name or (2) user_pass parameters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111125692513645&w=2 - http://marc.info/?l=bugtraq&m=111142918711745&w=2 - http://marc.info/?l=bugtraq&m=111142752220155&w=2
CVE ID: CVE-2005-0830 State: PUBLISHED Published: 2005-03-22T05:00:00 Last Updated: 2024-08-07T21:28:28.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Xzabite DYNDNSUpdate 0.6.15 and earlier, including the ipcheck function in dyndnsupdate.c, allow remote attackers who spoof a dyndns.org server to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200503-27.xml - http://secunia.com/advisories/14663 - http://bugs.gentoo.org/show_bug.cgi?id=84659
CVE ID: CVE-2005-0831 State: PUBLISHED Published: 2005-03-22T05:00:00Z Last Updated: 2024-09-16T19:40:50.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Post allows remote attackers to spoof the names of other users by registering with a username containing hex-encoded characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/393695 - http://www.securityfocus.com/bid/12845
CVE ID: CVE-2005-0832 State: PUBLISHED Published: 2005-03-22T05:00:00 Last Updated: 2024-08-07T21:28:28.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHP-Post before 0.33 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12845 - http://www.php-post.co.uk/index.php?s=content&p=download
CVE ID: CVE-2005-0833 State: PUBLISHED Published: 2005-03-22T05:00:00Z Last Updated: 2024-09-17T00:16:41.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Belkin 54G (F5D7130) wireless router allows remote attackers to access restricted resources by sniffing URIs from UPNP datagrams, then accessing those URIs, which do not require authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12846
CVE ID: CVE-2005-0834 State: PUBLISHED Published: 2005-03-22T05:00:00Z Last Updated: 2024-09-17T02:01:26.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Belkin 54G (F5D7130) wireless router enables SNMP by default in a manner that allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12846
CVE ID: CVE-2005-0835 State: PUBLISHED Published: 2005-03-22T05:00:00Z Last Updated: 2024-09-17T03:18:26.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMP service in the Belkin 54G (F5D7130) wireless router allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12846
CVE ID: CVE-2005-0836 State: PUBLISHED Published: 2005-03-22T05:00:00 Last Updated: 2024-08-07T21:28:28.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000200.1-1 - http://marc.info/?l=full-disclosure&m=111117284323657&w=2 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200255-1 - http://jouko.iki.fi/adv/ws.html - http://www.securityfocus.com/bid/12847 - http:
ch/document.do?assetkey=1-66-200255-1 - http://jouko.iki.fi/adv/ws.html - http://www.securityfocus.com/bid/12847 - http://secunia.com/advisories/14640 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57740-1 - http://www.gentoo.org/security/en/glsa/glsa-200503-28.xml - http://www.novell.com/linux/security/advisories/2005_32_java2.html
CVE ID: CVE-2005-0837 State: PUBLISHED Published: 2005-03-22T05:00:00 Last Updated: 2024-08-07T21:28:28.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a trailing . (dot). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19760 - http://www.securityfocus.com/archive/1/393705 - http://securitytracker.com/id?1013475 - http://secunia.com/advisories/14644 - http://www.securityfocus.com/bid/12849
CVE ID: CVE-2005-0838 State: PUBLISHED Published: 2005-03-22T05:00:00 Last Updated: 2024-08-07T21:28:28.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possibly execute arbitrary code via (1) a long test value in an xsl:when tag, (2) a long test value in an xsl:if tag, or (3) a long select value in an xsl:value-of tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/393705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19753 - http://securitytracker.com/id?1013475 - http://www.securityfocus.com/bid/12
.xforce.ibmcloud.com/vulnerabilities/19753 - http://securitytracker.com/id?1013475 - http://www.securityfocus.com/bid/12849
CVE ID: CVE-2005-0839 State: PUBLISHED Published: 2005-03-23T05:00:00 Last Updated: 2024-08-07T21:28:28.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.6 before 2.6.11 does not restrict access to the N_MOUSE line discipline for a TTY, which allows local users to gain privileges by injecting mouse or keyboard events into other user sessions. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-366.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9460 - http://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg64704.html - http://www.securityfocus.com/archi
f%3A9460 - http://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg64704.html - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://linux.bkbits.net:8080/linux-2.6/cset%4041fa6464E1UuGu6zmketEYxm73KSyQ
CVE ID: CVE-2005-0840 State: REJECTED Published: 2005-03-23T05:00:00 Last Updated: 2005-11-02T10:00:00 Description: No description available.
CVE ID: CVE-2005-0841 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passthru.php and possibly other php files in phpMyFamily 1.4.0 allows remote attackers to execute arbitrary SQL commands, as demonstrated via (1) the person parameter to people.php or (2) the Login field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19787 - http://secunia.com/advisories/14642 - http://marc.info/?l=bugtraq&m=111143649730845&w=2
loud.com/vulnerabilities/19787 - http://secunia.com/advisories/14642 - http://marc.info/?l=bugtraq&m=111143649730845&w=2 - http://securitytracker.com/id?1013493 - http://www.securityfocus.com/bid/12860
CVE ID: CVE-2005-0842 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) _i or (2) _c parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111151292704335&w=2 - http://secunia.com/advisories/13563
CVE ID: CVE-2005-0843 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting attacks via the body parameter, which is included in the resulting Location header. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111151651621097&w=2 - http://secunia.com/advisories/14680
CVE ID: CVE-2005-0844 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortel VPN client 5.01 stores the cleartext password in the memory of the Extranet.exe process, which could allow local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111151589203707&w=2 - http://securitytracker.com/id?1013512 - http://www.nta-monitor.com/news/vpn-flaws/nortel/nortel-client/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/19791
CVE ID: CVE-2005-0845 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Webmail interface in SurgeMail 2.2g3 allows remote authenticated users to write arbitrary files or directories via a .. (dot dot) in the attach_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://netwinsite.com/cgi/dnewsweb.cgi?cmd=article&group=netwin.surgemail&item=8814&utag= - http://marc.info/?l=bugtraq&m=111159967417903&w=2 - http://secunia.com/advisories/14658 - http://www.security.org.sg/vuln/surgemail22g3.html
CVE ID: CVE-2005-0846 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the email auto-reply message in SurgeMail 2.2g3 allow remote attackers to inject arbitrary web script or HTML via the (1) message subject or (2) message header field. Additional Analyst Notes: - CVE Program Container: References: - http://netwinsite.com/cgi/dnewsweb.cgi?cmd=article&group=netwin.surgemail&item=8814&utag= - http://marc.info/?l=bugtraq&m=111159967417903&w=2 - http://secunia.com/advisories/14658 - http://www.security.org.sg/vuln/surgemail22g3.html
CVE ID: CVE-2005-0847 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code Ocean FTP server 1.0 allows remote attackers to cause a denial of service via a large number of connections. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19777 - http://www.securityfocus.com/bid/12859 - https://www.exploit-db.com/exploits/893 - http://secunia.com/advisories/14662
CVE ID: CVE-2005-0848 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret Service, Shadow Force, and US Most Wanted, allow remote attackers to cause a denial of service via an empty UDP packet to the server, which cannot detect that a new packet has arrived using the socket ioctl. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14638 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19762 - http://aluigi.alterv
http://secunia.com/advisories/14638 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19762 - http://aluigi.altervista.org/adv/funlabsboom-adv.txt - http://securitytracker.com/id?1013492
CVE ID: CVE-2005-0849 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret Service, Shadow Force, and US Most Wanted, allow remote attackers to cause a denial of service (crash from invalid memory access) via a malformed join packet with values that cause the server to copy more memory than was actually provided in the packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14638 - http://aluigi.altervista.org/adv/fu
Notes: - CVE Program Container: References: - http://secunia.com/advisories/14638 - http://aluigi.altervista.org/adv/funlabsboom-adv.txt - http://securitytracker.com/id?1013492
CVE ID: CVE-2005-0850 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name such as CON, NUL, COM1, LPT1, and others. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12865 - http://sourceforge.net/project/shownotes.php?group_id=21558&release_id=314473
CVE ID: CVE-2005-0851 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: FileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a denial of service (infinite loop) via certain file uploads or directory listings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12865 - http://sourceforge.net/project/shownotes.php?group_id=21558&release_id=314473
CVE ID: CVE-2005-0852 State: PUBLISHED Published: 2005-03-24T05:00:00Z Last Updated: 2024-09-16T19:30:20.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP SP1 allows local users to cause a denial of service (system crash) via an empty datagram to a raw IP over IP socket (IP protocol 4), as originally demonstrated using code in Python 2.3. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12870 - http://www.securityfocus.com/archive/1/393956
CVE ID: CVE-2005-0853 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: betaparticle blog (bp blog) stores the database under the web root, which allows remote attackers to obtain sensitive information via a direct request to (1) dbBlogMX.mdb for versions before 3.0, or (2) Blog.mdb for versions 3.0 and later. NOTE: it was later reported that vector 2 also affects versions 6.0 through 9.0. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47419 - http://secunia.com/advisories/14668 - http://seclists.org/lists/bugtraq/2005/Mar/0360
mcloud.com/vulnerabilities/47419 - http://secunia.com/advisories/14668 - http://seclists.org/lists/bugtraq/2005/Mar/0360.html - http://www.securityfocus.com/bid/12861 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19779 - https://www.exploit-db.com/exploits/7499 - http://secunia.com/advisories/33233
CVE ID: CVE-2005-0854 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: betaparticle blog (bp blog), posisbly before version 4, allows remote attackers to bypass authentication and (1) upload files via a direct request to upload.asp or (2) delete files via a direct request to myFiles.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19781 - http://blog.betaparticle.com/template_permalink.asp?id=68 - http://secunia.com/advisories/14668 - http://seclists.org/lists/bugtraq/2005/Mar/0360.html - http://www.securityfocus.com/bid/12
ecunia.com/advisories/14668 - http://seclists.org/lists/bugtraq/2005/Mar/0360.html - http://www.securityfocus.com/bid/12861
CVE ID: CVE-2005-0855 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoolForum 0.8.1 beta and earlier allows remote attackers to obtain sensitive path information via direct requests to (1) entete.php, (2) profile_accueil.php, (3) profile_mdp.php, (4) profile_notify.php, (5) profile_options.php, (6) profile_perso.php, (7) profile_pm.php, or (8) readannonce.php, which leaks the full pathname in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/lists/bugtraq/2005/Mar/0358.html - http://securitytracker.com/id?1013474
CVE ID: CVE-2005-0856 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoolForum 0.8.1 beta and earlier allows remote attackers to manipulate SQL commands via certain requests to (1) alert.php or (2) viewip.php, possibly due to a SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/lists/bugtraq/2005/Mar/0358.html - http://securitytracker.com/id?1013474
CVE ID: CVE-2005-0857 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in avatar.php for CoolForum 0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the img parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12852 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19758 - http://securitytracker.com/id?1013474
CVE ID: CVE-2005-0858 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in CoolForum 0.8 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter to entete.php or (2) the login parameter to register.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19759 - http://www.securityfocus.com/bid/12852 - http://securitytracker.com/id?1013474