Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0655 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) hal.php, or (3) arsip.php, which reveals the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110979842315750&w=2 - http://echo.or.id/adv/adv011-y3dips-2005.txt - http://securitytracker.com/id?1013357
CVE ID: CVE-2005-0656 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in auraCMS 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) hits parameter to hits.php, (2) query parameter to index.php, or (3) theCount parameter to counter.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110979842315750&w=2 - http://echo.or.id/adv/adv011-y3dips-2005.txt - http://securitytracker.com/id?1013357 - http://secunia.com/advisories/14458
CVE ID: CVE-2005-0657 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Computalynx CProxy 3.3.x and 3.4.x through 3.4.4 allows remote attackers to read arbitrary files or cause a denial of service (application crash) via a .. (dot dot) in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14461 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19574 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19573 - http://marc.info/?l=bugtraq&m=110980096304013&w=2
CVE ID: CVE-2005-0658 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in a third party extension to TYPO3 allows remote attackers to execute arbitrary SQL commands via the category_uid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110995289619649&w=2 - http://marc.info/?l=bugtraq&m=110987892618892&w=2 - http://secunia.com/advisories/14465 - http://marc.info/?l=bugtraq&m=110996536620069&w=2
CVE ID: CVE-2005-0659 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct request to oracle.php, which reveals the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110996579900134&w=2 - http://securitytracker.com/id?1013377 - http://neosecurityteam.net/Advisories/Advisory-09.txt - http://neosecurityteam.tk/index.php?pagina=advisories&id=9
CVE ID: CVE-2005-0660 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in D-Forum 1.11 allows remote attackers to inject arbitrary web script or HTML via certain fields, as demonstrated using the page parameter in nav.php3. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14464 - http://securitytracker.com/id?1013349
CVE ID: CVE-2005-0661 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) lastvisit cookie. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14450 - http://securitytracker.com/id?1013351
CVE ID: CVE-2005-0662 State: PUBLISHED Published: 2005-03-07T05:00:00Z Last Updated: 2024-09-17T00:51:18.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the Avatar field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14414 - http://www.osvdb.org/14308
CVE ID: CVE-2005-0663 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary SQL commands via the f parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14414 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19051 - http://www.osvdb.org/14308
CVE ID: CVE-2005-0664 State: PUBLISHED Published: 2005-03-08T05:00:00 Last Updated: 2024-08-07T21:21:06.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013398 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102041-1 - http://www.debian.org/security/2005/dsa-709 - https://usn.ubuntu.com/91-1/ - http://www.gen
.do?assetkey=1-26-102041-1 - http://www.debian.org/security/2005/dsa-709 - https://usn.ubuntu.com/91-1/ - http://www.gentoo.org/security/en/glsa/glsa-200503-17.xml - http://www.vupen.com/english/advisories/2005/0240 - https://bugzilla.ubuntu.com/show_bug.cgi?id=7152 - http://www.vupen.com/english/advisories/2005/2565 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10832 - http://secunia.com/advisories/17705 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:064 - http://www.redhat.com/support/errata/RHSA-2005-300.html
CVE ID: CVE-2005-0665 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in xv before 3.10a allows remote attackers to execute arbitrary code via format string specifiers in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200503-09.xml - http://bugs.gentoo.org/show_bug.cgi?id=83686
CVE ID: CVE-2005-0666 State: PUBLISHED Published: 2005-03-07T05:00:00Z Last Updated: 2024-09-16T23:11:03.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, allows local users and possibly remote attackers to bypass intended access restrictions and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12729 - http://www.securityfocus.com/archive/1/392348 - http://secunia.com/advisories/14489
CVE ID: CVE-2005-0667 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message. Additional Analyst Notes: - CVE Program Container: References: - http://sylpheed.good-day.net/changelog-devel.html.en - http://securitytracker.com/id?1013376 - http://www.redhat.com/support/errata/RHSA-2005-303.html - http://www.gentoo.org/security/en/glsa/glsa-2005
/id?1013376 - http://www.redhat.com/support/errata/RHSA-2005-303.html - http://www.gentoo.org/security/en/glsa/glsa-200503-26.xml - http://sylpheed.good-day.net/changelog.html.en - http://secunia.com/advisories/14491
CVE ID: CVE-2005-0668 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in HTTP Anti Virus Proxy (HAVP) before 0.51 prevents viruses from being properly detected in certain files such as (1) .CAB or (2) .ZIP files. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013370 - http://www.bemberg.de/server-side/index.htm
CVE ID: CVE-2005-0669 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 through 1.2.1b allow remote attackers to execute arbitrary SQL commands via the (1) the faq_id in the faq mod, (2) the id parameter in the pages mod, (3) the id parameter in the siteinfo module, (4) the topic_id parameter in the articles module, (5) the ord_id in the orders module, (6) the dom_id parameter in the domains module, or (7) the invd_id parameter in the invoices module. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.
vd_id parameter in the invoices module. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14439 - http://forums.phpcoin.com/index.php?showtopic=4118 - http://lostmon.blogspot.com/2005/03/phpcoin-posible-sql-injection-comands.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19571 - http://forums.phpcoin.com/index.php?showtopic=4101 - http://securitytracker.com/id?1013329 - http://www.securityfocus.com/bid/12686 - http://forums.phpcoin.com/index.php?showtopic=4116
CVE ID: CVE-2005-0670 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 through 1.2.1b allows remote attackers to inject arbitrary web script or HTML via (1) the new parameter to mod.php, (2) the w parameter to mod.php, (3) the e parameter to login.php, (4) the o parameter to login.php, and possibly other scripts. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14439 - http://forums.phpcoin.com/index.php?showtopic=4118 - http://lostmon.blogspot.com/2005/03/phpcoin-posible-sql-injection-comands.
forums.phpcoin.com/index.php?showtopic=4118 - http://lostmon.blogspot.com/2005/03/phpcoin-posible-sql-injection-comands.html - http://forums.phpcoin.com/index.php?showtopic=4101 - http://securitytracker.com/id?1013329 - http://www.securityfocus.com/bid/12686 - http://forums.phpcoin.com/index.php?showtopic=4116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19572
CVE ID: CVE-2005-0671 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via format string specifiers in a command. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/ca3dex-adv.txt - http://secunia.com/advisories/14483 - http://www.securityfocus.com/bid/12727 - http://securitytracker.com/id?1013361
CVE ID: CVE-2005-0672 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via text strings that are not null terminated, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/ca3dex-adv.txt - http://secunia.com/advisories/14483 - http://www.securityfocus.com/bid/12727 - http://securitytracker.com/id?1013361
CVE ID: CVE-2005-0673 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in usercp_register.php for phpBB 2.0.13 allows remote attackers to inject arbitrary web script or HTML by setting the (1) allowhtml, (2) allowbbcode, or (3) allowsmilies parameters to inject HTML into signatures for personal messages, possibly when they are processed by privmsg.php or viewtopic.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013362 - http://neosecurityteam.tk/index.php?pagina=advisories&id=8 - http://secunia.com/advis
//securitytracker.com/id?1013362 - http://neosecurityteam.tk/index.php?pagina=advisories&id=8 - http://secunia.com/advisories/14475
CVE ID: CVE-2005-0674 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the News module for paBox 1.6 allows remote attackers to inject arbitrary web script or HTML via the text hidden parameter in an HTTP POST request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14474 - http://securitytracker.com/id?1013363 - http://www.securityfocus.com/bid/12719 - http://marc.info/?l=bugtraq&m=110987537431541&w=2
CVE ID: CVE-2005-0675 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.5 allows remote attackers to inject arbitrary web script or HTML via the (1) list or (2) frommethod parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/9497 - http://securitytracker.com/id?1013365
CVE ID: CVE-2005-0676 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via the search capability. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013365
CVE ID: CVE-2005-0677 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013365
CVE ID: CVE-2005-0678 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the script_root to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14505 - http://www.stadtaus.com/forum/t-1579.html - http://securitytracker.com/id?1013378 - http://marc.info/?l=bugtraq&m=110996489800035&w=2
CVE ID: CVE-2005-0679 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in tell_a_friend.inc.php for Tell A Friend Script 2.7 before 20050305 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code. NOTE: it was later reported that 2.4 is also affected. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19630 - http://www.osvdb.org/14628 - http://www.securityfocus.com/archive/1/474954/100/0/t
.ibmcloud.com/vulnerabilities/19630 - http://www.osvdb.org/14628 - http://www.securityfocus.com/archive/1/474954/100/0/threaded - http://securitytracker.com/id?1013390 - http://www.stadtaus.com/forum/t-1579.html - http://arfis.wordpress.com/2007/09/13/rfi-02-openelibrary/ - http://www.stadtaus.com/forum/t-1578.html
CVE ID: CVE-2005-0680 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in download_center_lite.inc.php for Download Center Lite 1.6 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - http://www.stadtaus.com/forum/t-1579.html - http://secunia.com/advisories/14513 - http://marc.info/?l=bugtraq&m=110996056601719&w=2 - http://www.stadtaus.com/forum/p-5895.html
CVE ID: CVE-2005-0681 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nokia Symbian 60 allows remote attackers to cause a denial of service (phone restart) via a Bluetooth nickname. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19594 - http://www.securiteam.com/securitynews/5PP0V00G1S.html - http://securitytracker.com/id?1013380 - http://www.securityfocus.com/bid/12743 - http://www.osvdb.org/14574
CVE ID: CVE-2005-0682 State: PUBLISHED Published: 2005-03-07T05:00:00 Last Updated: 2024-08-07T21:21:06.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14515 - http://drupal.org/files/drupal-4.5-xss-fix.patch - http://drupal.org/drupal-4.5.2
CVE ID: CVE-2005-0683 State: REJECTED Published: 2005-03-07T05:00:00 Last Updated: 2005-03-11T10:00:00 Description: No description available.
CVE ID: CVE-2005-0684 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-07T21:21:06.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long file parameter after a percent ("%") sign or (2) a long Lock-Token string to the WebDAV functionality, which is not properly handled by the getLockTokenHeader function in WDVHandler_CommonUtils.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=234&type=vulnerabilities - http://www.securityfocus.co
References: - http://www.idefense.com/application/poi/display?id=234&type=vulnerabilities - http://www.securityfocus.com/bid/13368 - http://dev.mysql.com/doc/maxdb/changes/changes_7.5.00.26.html#WebDAV - http://www.idefense.com/application/poi/display?id=235&type=vulnerabilities
CVE ID: CVE-2005-0685 State: PUBLISHED Published: 2005-03-08T05:00:00 Last Updated: 2024-08-07T21:21:06.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple access validation errors in OutStart Participate Enterprise (PE) allow remote attackers to (1) browse arbitrary directory trees by modifying the rootFolder parameter to displaynavigator.jsp, (2) rename arbitrary directory objects by modifying the selectedObject parameter to renamepopup.jsp, (3) delete arbitrary directory objects by modifying the selectedObjectsCSV parameter to displaydeletenavigator.jsp, and conduct other unauthorized activities via the (4) showDeleteView, (5) showWebFolderView, (6) showLibraryView, (
jsp, and conduct other unauthorized activities via the (4) showDeleteView, (5) showWebFolderView, (6) showLibraryView, (7) showMyLibraryView, (8) singleSelectObject, (9) processRadioSelection, (10) processCheckboxSelection, (11) singleSelectObject, (12) addToSelectedObjects, or (13) removeFromSelectedObjects commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14542 - http://www.securityfocus.com/archive/1/392623 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19632 - http://security.honour.ca/outstartpsi.txt - http://www.securityfocus.com/bid/12752
CVE ID: CVE-2005-0686 State: PUBLISHED Published: 2005-03-08T05:00:00 Last Updated: 2024-08-07T21:21:06.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote attackers to execute arbitrary code via a large image file that is used as a background. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200503-13.xml - https://sourceforge.net/project/shownotes.php?release_id=310416
CVE ID: CVE-2005-0687 State: PUBLISHED Published: 2005-03-08T05:00:00 Last Updated: 2024-08-07T21:21:06.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via format string specifiers in a reply address, which is not properly handled when printing the header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14487 - http://www.gentoo.org/security/en/glsa/glsa-200503-12.xml - http://bugs.gentoo.org/show_bug.cgi?id=83541
CVE ID: CVE-2005-0688 State: PUBLISHED Published: 2005-03-08T05:00:00 Last Updated: 2024-08-07T21:21:06.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability (CVE-1999-0016). Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1288 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - https://docs.mic
ion/oval%3Aorg.mitre.oval%3Adef%3A1288 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1685 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A482 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://secunia.com/advisories/22341 - http://www.vupen.com/english/advisories/2006/3983 - http://marc.info/?l=bugtraq&m=111005099504081&w=2 - https://oval.cisecurity.org/reposito
/english/advisories/2006/3983 - http://marc.info/?l=bugtraq&m=111005099504081&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4978
CVE ID: CVE-2005-0689 State: PUBLISHED Published: 2005-03-08T05:00:00 Last Updated: 2024-08-07T21:21:06.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: includer.cgi in The Includer allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the URL or (2) the template parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111030957413411&w=2 - http://marc.info/?l=bugtraq&m=111021730710779&w=2 - http://www.securityfocus.com/bid/12738