Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0967 State: PUBLISHED Published: 2005-04-06T04:00:00 Last Updated: 2024-08-07T21:35:58.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gaim 1.2.0 allows remote attackers to cause a denial of service (application crash) via a malformed file transfer request to a Jabber user, which leads to an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:071 - http://www.securityfocus.com/archive/1/426078/100/0/threaded - http://sourceforge.net/tracker/?func=detail&aid=1172115&group_id=235&atid=100235 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
ail&aid=1172115&group_id=235&atid=100235 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9657 - http://gaim.sourceforge.net/security/?id=15 - http://secunia.com/advisories/14815 - http://www.redhat.com/support/errata/RHSA-2005-365.html - http://www.securityfocus.com/bid/13004 - http://www.novell.com/linux/security/advisories/2005_36_sudo.html - http://securitytracker.com/id?1013645
CVE ID: CVE-2005-0968 State: PUBLISHED Published: 2005-04-05T04:00:00Z Last Updated: 2024-09-16T17:34:25.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Computer Associates (CA) eTrust Intrusion Detection 3.0 allows remote attackers to cause a denial of service via large size values that are not properly validated before calling the CPImportKey function in the Crypto API. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=223&type=vulnerabilities
CVE ID: CVE-2005-0969 State: PUBLISHED Published: 2005-05-12T04:00:00Z Last Updated: 2024-09-16T16:28:23.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via crafted parameters. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html
CVE ID: CVE-2005-0970 State: PUBLISHED Published: 2005-04-22T04:00:00 Last Updated: 2024-08-07T21:35:58.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mac OS X 10.3.9 and earlier allows users to install, create, and execute setuid/setgid scripts, contrary to the intended design, which may allow attackers to conduct unauthorized activities with escalated privileges via vulnerable scripts. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html
CVE ID: CVE-2005-0971 State: PUBLISHED Published: 2005-05-12T04:00:00Z Last Updated: 2024-09-17T03:27:40.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the semop system call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/212190 - http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html
CVE ID: CVE-2005-0972 State: PUBLISHED Published: 2005-05-12T04:00:00Z Last Updated: 2024-09-16T18:23:17.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the searchfs system call in Mac OS X 10.3.9 and earlier allows local users to execute arbitrary code via crafted parameters. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html - http://www.kb.cert.org/vuls/id/185702
CVE ID: CVE-2005-0973 State: PUBLISHED Published: 2005-05-12T04:00:00Z Last Updated: 2024-09-17T02:42:14.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the setsockopt system call in Mac OS X 10.3.9 and earlier allows local users to cause a denial of service (memory exhaustion) via crafted arguments. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html
CVE ID: CVE-2005-0974 State: PUBLISHED Published: 2005-05-12T04:00:00 Last Updated: 2024-08-07T21:35:58.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the nfs_mount call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/713614 - http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html - http://lists.apple.com/archives/security-announce/2005/May/msg00004.html
CVE ID: CVE-2005-0975 State: PUBLISHED Published: 2005-04-22T04:00:00 Last Updated: 2024-08-07T21:35:59.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the parse_machfile function in the mach-o loader (mach_loader.c) for the Darwin Kernel as used in Mac OS X 10.3.7, and other versions before 10.3.9, allows local users to cause a denial of service (CPU consumption) via a crafted mach-o header. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013735 - http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html - http://securitytracker.com/id?1012941 - http://felinemenace.org/advisories/macos
urity-announce/2005/Apr/msg00000.html - http://securitytracker.com/id?1012941 - http://felinemenace.org/advisories/macosx.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/18979 - http://www.vupen.com/english/advisories/2005/0041 - http://marc.info/?l=bugtraq&m=110616533903671&w=2 - http://secunia.com/advisories/13902 - http://www.ciac.org/ciac/bulletins/p-185.shtml - http://www.securityfocus.com/bid/12314
CVE ID: CVE-2005-0976 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:35:58.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated using automatically mounted disk images and file:// URLs. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html - http://remahl.se/david/vuln/001/
CVE ID: CVE-2005-0977 State: PUBLISHED Published: 2005-04-05T04:00:00 Last Updated: 2024-08-07T21:35:58.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shmem_nopage function in shmem.c for the tmpfs driver in Linux kernel 2.6 does not properly verify the address argument, which allows local users to cause a denial of service (kernel crash) via an invalid address. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10400 - http://linux.bkbits.net:8080/linux-2.6/cset%40420551fbRlv9-QG6Gw9Lw_bKVfPSsg - http://www.redhat.com/support/errata/RHSA-2005-366.html - https://usn.ubunt
-2.6/cset%40420551fbRlv9-QG6Gw9Lw_bKVfPSsg - http://www.redhat.com/support/errata/RHSA-2005-366.html - https://usn.ubuntu.com/103-1/ - http://www.securityfocus.com/bid/12970 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://lkml.org/lkml/2005/2/5/111
CVE ID: CVE-2005-0978 State: PUBLISHED Published: 2005-04-05T04:00:00 Last Updated: 2024-08-07T21:35:59.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. (dot dot) in a PUSH command. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111238511206503&w=2 - http://secunia.com/advisories/14790/ - http://www.digitalmunition.com/DMA%5B2005-0401a%5D.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/19930 - http://www.securityfocus.com/bid/12961
CVE ID: CVE-2005-0979 State: PUBLISHED Published: 2005-04-05T04:00:00 Last Updated: 2024-08-07T21:35:59.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in RUMBA 7.3 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted values in a profile file, as demonstrated using a long SysName field. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111238364916500&w=2 - http://www.securityfocus.com/bid/12965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19934
CVE ID: CVE-2005-0980 State: PUBLISHED Published: 2005-04-05T04:00:00 Last Updated: 2024-08-07T21:35:59.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary PHP code by modifying the view parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14802 - http://marc.info/?l=bugtraq&m=111247198021626&w=2 - http://www.securityfocus.com/bid/12973
CVE ID: CVE-2005-0981 State: PUBLISHED Published: 2005-04-05T04:00:00 Last Updated: 2024-08-07T21:35:58.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Pro 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) payment or (2) send parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14802 - http://marc.info/?l=bugtraq&m=111247198021626&w=2 - http://www.securityfocus.com/bid/12974
CVE ID: CVE-2005-0982 State: PUBLISHED Published: 2005-04-05T04:00:00 Last Updated: 2024-08-07T21:35:59.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Yet Another Forum.net 0.9.9 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) location, or (3) Subject field. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013632 - http://marc.info/?l=bugtraq&m=111247338301262&w=2
CVE ID: CVE-2005-0983 State: PUBLISHED Published: 2005-04-05T04:00:00 Last Updated: 2024-08-07T21:35:58.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14811 - http://aluigi.altervista.org/adv/q3msgboom-adv.txt - http://www.securityfocus.com/bid/12976 - http://marc.info/?l=bugtraq&m=111246796918067&w=2 - http://bani.anime.net/banimod/forum
ww.securityfocus.com/bid/12976 - http://marc.info/?l=bugtraq&m=111246796918067&w=2 - http://bani.anime.net/banimod/forums/viewtopic.php?p=27322
CVE ID: CVE-2005-0984 State: PUBLISHED Published: 2005-04-05T04:00:00 Last Updated: 2024-08-07T21:35:59.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the G_Printf function in Star Wars Jedi Knight: Jedi Academy 1.011 and earlier allows remote attackers to execute arbitrary code via a long message using commands such as (1) say and (2) tell. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12977 - http://secunia.com/advisories/14809 - http://aluigi.altervista.org/adv/jamsgbof-adv.txt - http://marc.info/?l=bugtraq&m=111246855213653&w=2
CVE ID: CVE-2005-0985 State: PUBLISHED Published: 2006-08-05T01:00:00 Last Updated: 2024-08-07T21:35:59.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Mac OS X kernel before 10.3.8 allows local users to cause a denial of service (temporary hang) via unspecified attack vectors related to the fan control unit (FCU) driver. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=301324
CVE ID: CVE-2005-0986 State: PUBLISHED Published: 2005-04-06T04:00:00 Last Updated: 2024-08-07T21:35:59.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service (deep recursion and nHTTP.exe process crash) via a long GET request containing UNICODE decimal value 430 characters, which causes the stack to be exhausted. NOTE: IBM has reported that it is unable to replicate this issue. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg21202446 - http://secunia.com/advisories/1
gram Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg21202446 - http://secunia.com/advisories/14858 - http://www.idefense.com/application/poi/display?id=224&type=vulnerabilities - http://news.zdnet.co.uk/software/applications/0%2C39020384%2C39194293%2C00.htm - http://www.vupen.com/english/advisories/2005/0322
CVE ID: CVE-2005-0987 State: PUBLISHED Published: 2005-04-06T04:00:00 Last Updated: 2024-08-07T21:35:59.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in IRC Services NickServ LISTLINKS before 5.0.50 allows remote attackers to obtain the links of a nick. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013622 - http://www.ircservices.esper.net/Changes.txt
CVE ID: CVE-2005-0988 State: PUBLISHED Published: 2005-04-06T04:00:00 Last Updated: 2024-08-07T21:35:59.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html - http://secunia.com/advisories/22033 - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.c
g00000.html - http://secunia.com/advisories/22033 - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.debian.org/security/2005/dsa-752 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101816-1 - http://rhn.redhat.com/errata/RHSA-2005-357.html - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html - http://www.securityfocus.com/bid/12996 - http://www.osvdb.org/15487 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A765 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10242 - https://oval.cisecurity.org/repository/s
security.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10242 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1169 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt - http://secunia.com/advisories/18100 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852 - http://www.securityfocus.com/archive/1/394965
CVE ID: CVE-2005-0989 State: PUBLISHED Published: 2005-04-06T04:00:00 Last Updated: 2024-08-07T21:35:59.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100025 - http://www.redhat.com/support/errata/RHSA-2005-386.html - http://www.securityfocus.com/bid/12988 - ftp://ftp.sco.com/pub/updates/Open
dhat.com/support/errata/RHSA-2005-386.html - http://www.securityfocus.com/bid/12988 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - http://secunia.com/advisories/14820 - http://secunia.com/advisories/19823 - http://www.securityfocus.com/bid/15495 - http://securitytracker.com/id?1013635 - http://www.redhat.com/support/errata/RHSA-2005-601.html - http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml - http://securitytracker.com/id?1013643 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11706 - http://www.redhat.com/support/errata/RHSA-2005-384.html - http://www.redhat.com/support/errata/RHSA-2005-383.html - http://www.no
w.redhat.com/support/errata/RHSA-2005-384.html - http://www.redhat.com/support/errata/RHSA-2005-383.html - http://www.novell.com/linux/security/advisories/2006_04_25.html - https://bugzilla.mozilla.org/show_bug.cgi?id=288688 - http://www.mozilla.org/security/announce/mfsa2005-33.html - http://secunia.com/advisories/14821
CVE ID: CVE-2005-0990 State: PUBLISHED Published: 2005-04-06T04:00:00 Last Updated: 2024-08-07T21:35:59.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9613 - https://bugzilla.ubuntu.com/show_bug.cgi?id=8459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19957 - http://www.securityfocus.com/bid/12981 - https://usn.ubuntu.com/104-1/ - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=302
//www.securityfocus.com/bid/12981 - https://usn.ubuntu.com/104-1/ - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=302412 - http://www.redhat.com/support/errata/RHSA-2005-377.html
CVE ID: CVE-2005-0991 State: PUBLISHED Published: 2005-04-06T04:00:00Z Last Updated: 2024-09-17T01:51:44.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: RC.BOOT in IBM AIX 5.1, 5.2, and 5.3 does not "use a secure location for temporary files," which allows local users to have an unknown impact, probably by overwriting files. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=IY59205&apar=only - http://www-1.ibm.com/support/search.wss?rs=0&q=IY59206&apar=only - http://www.securityfocus.com/bid/12992 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY59207&apar=only
CVE ID: CVE-2005-0992 State: PUBLISHED Published: 2005-04-07T04:00:00 Last Updated: 2024-08-07T21:35:59.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111264361622660&w=2 - http://www.securityfocus.com/bid/12982 - http://secunia.com/advisories/14799 - http://www.arrelnet.com/advisories/adv20050403.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19940 - http://www.phpmyadmin.net/home_page/securi
v20050403.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19940 - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-3 - http://www.gentoo.org/security/en/glsa/glsa-200504-08.xml
CVE ID: CVE-2005-0993 State: PUBLISHED Published: 2005-04-07T04:00:00 Last Updated: 2024-08-07T21:35:59.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in nwprint in SCO OpenServer 5.0.7 allows local users to execute arbitrary code via a long command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12986 - http://marc.info/?l=bugtraq&m=111263251718491&w=2
CVE ID: CVE-2005-0994 State: PUBLISHED Published: 2005-04-07T04:00:00 Last Updated: 2024-08-07T21:35:59.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via (1) the Category or resultCnt parameters to advSearch_h.asp, and possibly (2) the offset parameter to tarinasworld_butterflyjournal.asp. NOTE: it is possible that item (2) is the result of a typo or editing error from the original research report. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15263 - http://secunia.com/advisories/14833 - http://www.osvdb.org/15265 - http
iner: References: - http://www.osvdb.org/15263 - http://secunia.com/advisories/14833 - http://www.osvdb.org/15265 - http://www.securityfocus.com/bid/12990 - http://digitalparadox.org/advisories/prodcart.txt
CVE ID: CVE-2005-0995 State: PUBLISHED Published: 2005-04-07T04:00:00 Last Updated: 2024-08-07T21:35:59.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ProductCart 2.7 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter to advSearch_h.asp, (2) the redirectUrl parameter to NewCust.asp, (3) the country parameter to storelocator_submit.asp, or (4) the error parameter to techErr.asp. NOTE: it has been reported that storelocator_submit.asp does not exist in ProductCart. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15264 - http://www.osvdb.org/1526
Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15264 - http://www.osvdb.org/15267 - http://secunia.com/advisories/14833 - http://www.securityfocus.com/bid/12990 - http://www.osvdb.org/15268 - http://digitalparadox.org/advisories/prodcart.txt - http://www.osvdb.org/15266
CVE ID: CVE-2005-0996 State: PUBLISHED Published: 2005-04-07T04:00:00 Last Updated: 2024-08-07T21:35:59.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the email or url parameters in the Add function, (2) the min parameter in the viewsdownload function, or (3) the min parameter in the search function. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111289685724764&w=2
CVE ID: CVE-2005-0997 State: PUBLISHED Published: 2005-04-07T04:00:00 Last Updated: 2024-08-07T21:35:59.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 7.6 allow remote attackers to execute arbitrary SQL commands via (1) the email or url parameters in the Add function, (2) the url parameter in the modifylinkrequestS function, (3) the orderby or min parameters in the viewlink function, (4) the orderby, min, or show parameters in the search function, or (5) the ratenum parameter in the MostPopular function. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=11
MostPopular function. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111289685724764&w=2
CVE ID: CVE-2005-0998 State: PUBLISHED Published: 2005-04-07T04:00:00 Last Updated: 2024-08-07T21:35:59.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web_Links module for PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via an invalid show parameter, which triggers a division by zero PHP error that leaks the full pathname of the server. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111289685724764&w=2