Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-3664 State: PUBLISHED Published: 2005-11-18T11:00:00 Last Updated: 2024-08-07T23:17:23.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Kaspersky Anti-Virus Engine, as used in Kaspersky Personal 5.0.227, Anti-Virus On-Demand Scanner for Linux 5.0.5, and F-Secure Anti-Virus for Linux 4.50 allows remote attackers to execute arbitrary code via a crafted CHM file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17130 - http://www.osvdb.org/19913 - http://www.idefense.com/application/poi/display?id=318&type=vulnerabilities - http://www.osvdb.org/19912 - https://exchange.xforce.ibmcloud.com
/application/poi/display?id=318&type=vulnerabilities - http://www.osvdb.org/19912 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22564 - http://www.securityfocus.com/bid/15054 - http://secunia.com/advisories/17144
CVE ID: CVE-2005-3665 State: PUBLISHED Published: 2005-12-08T11:00:00 Last Updated: 2024-08-07T23:17:23.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_HOST variable and (2) various scripts in the libraries directory that handle header generation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423142/100/0/threaded - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-8 - http://www.gentoo.org/security/en/glsa/glsa-200512-03.xml - http://www.debian.or
_page/security.php?issue=PMASA-2005-8 - http://www.gentoo.org/security/en/glsa/glsa-200512-03.xml - http://www.debian.org/security/2006/dsa-1207 - http://secunia.com/advisories/22781 - http://www.securityfocus.com/bid/15735 - http://secunia.com/advisories/17957 - http://www.vupen.com/english/advisories/2005/2772 - http://secunia.com/advisories/18618 - http://secunia.com/advisories/17895
CVE ID: CVE-2005-3666 State: PUBLISHED Published: 2005-11-18T21:00:00Z Last Updated: 2024-09-16T16:33:21.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified format string vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable. Additional Analyst Notes: - CVE Program Container: References: - http://www.niscc.gov.uk/niscc/docs/br-20051
vulnerable. Additional Analyst Notes: - CVE Program Container: References: - http://www.niscc.gov.uk/niscc/docs/br-20051114-01013.html?lang=en - http://jvn.jp/niscc/NISCC-273756/index.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/ - http://www.kb.cert.org/vuls/id/226364
CVE ID: CVE-2005-3667 State: PUBLISHED Published: 2005-11-18T21:00:00Z Last Updated: 2024-09-17T00:56:43.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable. In addition, since "denial of service" is an impact and not a vulnerability, it is unknown wh
s are actually vulnerable. In addition, since "denial of service" is an impact and not a vulnerability, it is unknown which underlying vulnerabilities are actually covered by this particular candidate. Additional Analyst Notes: - CVE Program Container: References: - http://www.niscc.gov.uk/niscc/docs/br-20051114-01013.html?lang=en - http://jvn.jp/niscc/NISCC-273756/index.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/ - http://www.kb.cert.org/vuls/id/226364
CVE ID: CVE-2005-3668 State: PUBLISHED Published: 2005-11-18T21:00:00Z Last Updated: 2024-09-16T16:58:04.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable. Additional Analyst Notes: - CVE Program Container: References: - http://www.niscc.gov.uk/niscc/docs/br-2
lly vulnerable. Additional Analyst Notes: - CVE Program Container: References: - http://www.niscc.gov.uk/niscc/docs/br-20051114-01013.html?lang=en - http://jvn.jp/niscc/NISCC-273756/index.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/ - http://www.kb.cert.org/vuls/id/226364
CVE ID: CVE-2005-3669 State: PUBLISHED Published: 2005-11-18T21:00:00 Last Updated: 2024-08-07T23:17:23.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a denial of service (device reset) via certain malformed IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the Cisco advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/
3668 this issue applies to. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015200 - http://securitytracker.com/id?1015202 - http://www.niscc.gov.uk/niscc/docs/br-20051114-01013.html?lang=en - http://jvn.jp/niscc/NISCC-273756/index.html - http://securitytracker.com/id?1015201 - http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/ - http://www.securityfocus.com/bid/15401 - http://www.kb.cert.org/vuls/id/226364 - http://securitytracker.com/id?1015199 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5226 - http://securitytracker.com/id?1015198 - http://www.cisco.com/warp/public/707/cisco-sa-200511
g.mitre.oval%3Adef%3A5226 - http://securitytracker.com/id?1015198 - http://www.cisco.com/warp/public/707/cisco-sa-20051114-ipsec.shtml - http://secunia.com/advisories/17553
CVE ID: CVE-2005-3670 State: PUBLISHED Published: 2005-11-18T21:00:00 Last Updated: 2024-08-07T23:17:23.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in HP HP-UX B.11.00, B.11.11, and B.11.23 running IPSec, HP Jetdirect 635n IPv6/IPsec Print Server, and HP Tru64 UNIX 5.1B-3 and 5.1B-2/PK4, allow remote attackers to cause a denial of service via certain IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the HP advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to. Additi
the HP advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015227 - http://www.kb.cert.org/vuls/id/MIMG-6J6QS4 - http://securitytracker.com/id?1015229 - http://www.vupen.com/english/advisories/2006/0880 - http://www2.itrc.hp.com/service/cki/docDisplay.do?admit=-1335382922+1141762289787+28353475&docId=c00602119 - http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en - http://www.securityfocus.com/bid/15471 - http://www.vupen.com/english/advisories/2005/2462 - http://jvn.jp/niscc/NISCC-273756/index.html - http://securitytracker.com/id
www.vupen.com/english/advisories/2005/2462 - http://jvn.jp/niscc/NISCC-273756/index.html - http://securitytracker.com/id?1015727 - http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/ - http://www.securityfocus.com/bid/17030 - http://www.securityfocus.com/bid/15474 - http://www.kb.cert.org/vuls/id/226364 - http://www2.itrc.hp.com/service/cki/docDisplay.do?admit=-1335382922+1141762289787+28353475&docId=c00602119 - http://www.kb.cert.org/vuls/id/MIMG-6J6QS4 - http://secunia.com/advisories/19174 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5642 - http://secunia.com/advisories/17598 - http://www.kb.cert.org/vuls/id/MIMG-6J6QS4
CVE ID: CVE-2005-3671 State: PUBLISHED Published: 2005-11-18T21:00:00 Last Updated: 2024-08-07T23:17:23.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. Additional Analyst Notes: - CVE Program Container: References: - http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?
ditional Analyst Notes: - CVE Program Container: References: - http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en - http://www.securityfocus.com/bid/15416 - http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00058.html - http://securitytracker.com/id?1015214 - http://secunia.com/advisories/17581 - http://archives.neohapsis.com/archives/bugtraq/2005-12/0161.html - http://jvn.jp/niscc/NISCC-273756/index.html - http://archives.neohapsis.com/archives/bugtraq/2005-12/0138.html - http://www.gentoo.org/security/en/glsa/glsa-200512-04.xml - http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/ - http://www.kb.cert.org/vuls/id/226364 - http://secunia.com/advi
w.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/ - http://www.kb.cert.org/vuls/id/226364 - http://secunia.com/advisories/18115 - http://secunia.com/advisories/17680 - http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00057.html - http://www.openswan.org/niscc2/ - http://secunia.com/advisories/17980 - http://www.novell.com/linux/security/advisories/2005_70_ipsec.html
CVE ID: CVE-2005-3672 State: PUBLISHED Published: 2005-11-18T21:00:00 Last Updated: 2024-08-07T23:17:23.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Key Exchange version 1 (IKEv1) implementation in Stonesoft StoneGate Firewall before 2.6.1 allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the Stonesoft advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to. Additional Analyst Notes: - CVE Program Container: References: - http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang
onal Analyst Notes: - CVE Program Container: References: - http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en - http://jvn.jp/niscc/NISCC-273756/index.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/ - http://www.kb.cert.org/vuls/id/226364 - http://www.vupen.com/english/advisories/2005/2408 - http://www.stonesoft.com/support/Security_Advisories/7244.html - http://www.securityfocus.com/bid/15405 - http://secunia.com/advisories/17566
CVE ID: CVE-2005-3673 State: PUBLISHED Published: 2005-11-18T21:00:00 Last Updated: 2024-08-07T23:17:23.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17621 - http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.p
am Container: References: - http://secunia.com/advisories/17621 - http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en - http://jvn.jp/niscc/NISCC-273756/index.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/ - http://www.kb.cert.org/vuls/id/226364 - http://www.vupen.com/english/advisories/2005/2470 - http://www.securityfocus.com/bid/15479 - http://secureknowledge.us.checkpoint.com/SecureKnowledge/viewSolutionDocument.do?id=sk31316 - http://securitytracker.com/id?1015235
CVE ID: CVE-2005-3674 State: PUBLISHED Published: 2005-11-18T21:00:00 Last Updated: 2024-08-07T23:17:23.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Sun Solaris 9 and 10 allows remote attackers to cause a denial of service (in.iked crash) via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015210 - http://www.vup
Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015210 - http://www.vupen.com/english/advisories/2005/2417 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102040-1 - http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en - http://jvn.jp/niscc/NISCC-273756/index.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/ - http://www.kb.cert.org/vuls/id/226364 - http://www.securityfocus.com/bid/15420 - http://secunia.com/advisories/17554
CVE ID: CVE-2005-3675 State: PUBLISHED Published: 2005-11-18T23:00:00 Last Updated: 2024-08-07T23:17:23.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Transmission Control Protocol (TCP) allows remote attackers to cause a denial of service (bandwidth consumption) by sending ACK messages for packets that have not yet been received (optimistic ACKs), which can cause the sender to increase its transmission rate until it fills available bandwidth. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/102014 - http://www.cs.umd.edu/~capveg/optack/optack-extended.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/23055 - http:/
/www.cs.umd.edu/~capveg/optack/optack-extended.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/23055 - http://www.securityfocus.com/bid/15468/
CVE ID: CVE-2005-3676 State: PUBLISHED Published: 2005-11-18T23:00:00 Last Updated: 2024-08-07T23:17:23.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in download.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20945 - http://www.securityfocus.com/bid/15399/ - http://www.vupen.com/english/advisories/2005/2860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23047 - http://marc.info/?l=bugtraq&m=113198898514200&w=2
CVE ID: CVE-2005-3677 State: PUBLISHED Published: 2005-11-18T23:00:00 Last Updated: 2024-08-07T23:17:23.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RealNetworks RealPlayer 10 and 10.5 allows remote attackers to execute arbitrary code via a crafted image in a RealPlayer Skin (RJS) file. NOTE: due to the lack of details, it is unclear how this is different than CVE-2005-2629 and CVE-2005-2630, but the vendor advisory implies that it is different. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15398/ - http://secunia.com/advisories/17514 - http://service.real.com/help/faq/security/051110_player/EN/ - http:
m/bid/15398/ - http://secunia.com/advisories/17514 - http://service.real.com/help/faq/security/051110_player/EN/ - http://marc.info/?l=bugtraq&m=113181464921104&w=2
CVE ID: CVE-2005-3678 State: PUBLISHED Published: 2005-11-18T23:00:00 Last Updated: 2024-08-07T23:17:23.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Talk before 1.0.0.76, with email notification enabled, allows remote attackers to cause a denial of service (connection reset) via email with a blank sender. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=113200923423283&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23041 - http://www.securityfocus.com/bid/15369 - http://marc.info/?l=bugtraq&m=113156797404902&w=2
CVE ID: CVE-2005-3679 State: PUBLISHED Published: 2005-11-18T23:00:00 Last Updated: 2024-08-07T23:17:23.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index.php in ActiveCampaign 1-2-All Broadcast Email allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username field in the admin control panel. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=113201260613863&w=2 - http://www.osvdb.org/20949 - http://www.securityfocus.com/bid/15400/
CVE ID: CVE-2005-3680 State: PUBLISHED Published: 2005-11-18T23:00:00 Last Updated: 2024-08-07T23:17:23.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in editor_registry.php in XOOPS 2.2.3 allows remote attackers to read or include arbitrary local files via a .. (dot dot) in the xoopsConfig[language] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17573/ - http://www.securityfocus.com/bid/15406/ - http://marc.info/?l=bugtraq&m=113199244824660&w=2 - http://www.vupen.com/english/advisories/2005/2428
CVE ID: CVE-2005-3681 State: PUBLISHED Published: 2005-11-18T23:00:00 Last Updated: 2024-08-07T23:17:23.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewcat.php in XOOPS WF-Downloads module 2.05 allows remote attackers to execute arbitrary SQL commands via the list parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17575 - http://www.securityfocus.com/bid/15406/ - http://www.vupen.com/english/advisories/2005/2425 - http://www.osvdb.org/20852 - http://marc.info/?l=bugtraq&m=113199244824660&w=2
CVE ID: CVE-2005-3682 State: PUBLISHED Published: 2005-11-18T23:00:00 Last Updated: 2024-08-07T23:17:23.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via (1) the AuthID parameter in ForumAuthDetails.php, and the TopicID parameter in (2) ForumTopicDetails.php and (3) ForumReply.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20846 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23170 - http://securityreason.com/securityalert/181 - http://www.vupen.com/english/advisories/2005/2421 - http://marc.info/?l=bugtraq&m=1
curityreason.com/securityalert/181 - http://www.vupen.com/english/advisories/2005/2421 - http://marc.info/?l=bugtraq&m=113201564319843&w=2 - http://www.osvdb.org/20845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23171 - http://www.securityfocus.com/bid/15410/references - http://secunia.com/advisories/17548/ - http://www.osvdb.org/20847
CVE ID: CVE-2005-3683 State: PUBLISHED Published: 2005-11-19T01:00:00 Last Updated: 2024-08-07T23:17:23.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via a long USER command. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015230 - http://secunia.com/advisories/17583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23118 - http://www.vupen.com/english/advisories/2005/2458 - http://www.osvdb.org/20909 - http://marc.info/?l=full-disclosure&
- http://www.vupen.com/english/advisories/2005/2458 - http://www.osvdb.org/20909 - http://marc.info/?l=full-disclosure&m=113213763821294&w=2 - http://marc.info/?l=full-disclosure&m=113216611924774&w=2 - http://freeftpd.com/?ctt=changelog - http://www.securityfocus.com/bid/15457
CVE ID: CVE-2005-3684 State: PUBLISHED Published: 2005-11-19T01:00:00 Last Updated: 2024-08-07T23:17:23.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in freeFTPd 1.0.8, without logging enabled, allow remote authenticated attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via long (1) MKD and (2) DELE commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15486 - http://www.vupen.com/english/advisories/2005/2471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23118 - http://www.osvdb.org/20909 - http://secunia.com/advisories/17624 - http://marc.
rce.ibmcloud.com/vulnerabilities/23118 - http://www.osvdb.org/20909 - http://secunia.com/advisories/17624 - http://marc.info/?l=full-disclosure&m=113222358007499&w=2
CVE ID: CVE-2005-3685 State: PUBLISHED Published: 2005-11-19T01:00:00 Last Updated: 2024-08-07T23:17:23.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in shopadmin.asp in VP-ASP Shopping Cart 5.50 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20954 - http://www.securityfocus.com/bid/15490 - http://secunia.com/advisories/17602 - http://www.vupen.com/english/advisories/2005/2486 - http://membres.lycos.fr/newnst/exploit/VPASP%20Shopping_By_ConcorDHacK.txt - http://securitytracker.com/id?1015238
CVE ID: CVE-2005-3686 State: PUBLISHED Published: 2005-11-19T01:00:00 Last Updated: 2024-08-07T23:17:23.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.inc.php in Unclassified NewsBoard before 1.5.3 Patch 4 allows remote attackers to execute arbitrary SQL commands via the (1) DateFrom or (2) DateUntil parameter to forum.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20951 - http://www.vupen.com/english/advisories/2005/2487 - http://packetstormsecurity.org/0511-exploits/unb153pl3_xpl.html - http://rgod.altervista.org/unb153pl3_xpl.html - http://www.securityfocus.com/bid/15466 - http://secunia.com
3_xpl.html - http://rgod.altervista.org/unb153pl3_xpl.html - http://www.securityfocus.com/bid/15466 - http://secunia.com/advisories/17614
CVE ID: CVE-2005-3687 State: PUBLISHED Published: 2005-11-19T01:00:00Z Last Updated: 2024-09-17T02:37:12.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: cancel_account.php in WHM AutoPilot 2.5.30 and earlier allows remote attackers to cancel requests for arbitrary accounts via a modified c parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17630 - http://www.securityfocus.com/bid/15483