Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-1714 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object of type "text/html" with the DATA field that identifies the HTML document that contains the object, which may cause infinite recursion. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/268776 - http://www.securityfocus.com/bid/4564 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8904
CVE ID: CVE-2002-1715 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:55.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/8908 - http://www.securityfocus.com/bid/4547 - http://online.securityfocus.com/archive/1/268446
CVE ID: CVE-2002-1716 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbitrary files using the SaveAs capability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8711 - http://online.securityfocus.com/archive/1/265087 - http://www.guninski.com/m%24oxp-2.html
CVE ID: CVE-2002-1717 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:55.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information via a GET request to (1) /_vti_pvt/access.cnf, (2) /_vti_pvt/botinfs.cnf, (3) /_vti_pvt/bots.cnf, or (4) /_vti_pvt/linkinfo.cnf. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/256125 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8174 - http://www.securityfocus.com/bid/4078 - http://online.securityfocus.com/archive/1/255555
CVE ID: CVE-2002-1718 State: PUBLISHED Published: 2005-06-21T04:00:00Z Last Updated: 2024-09-16T17:15:31.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension (FPSE) file, as claimed using an HTTP request for colegal.htm that contains .. (dot dot) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/256125 - http://www.securityfocus.com/bid/4084 - http://online.securityfocus.com/archive/1/255555
CVE ID: CVE-2002-1719 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Bavo 0.3 allows remote attackers to modify posted messages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40988 - http://securitytracker.com/id?1003503 - http://www.securityfocus.com/bid/4079
CVE ID: CVE-2002-1720 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain privileges via the password field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8991 - http://www.securiteam.com/windowsntfocus/5VP030K75G.html
CVE ID: CVE-2002-1721 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in alterMIME 0.1.10 and 0.1.11 allows remote attackers to cause a denial of service (crash) via an x-header that causes snprintf overwrite the FFGET_FILE variable with a (null) byte. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/8992 - http://www.securityfocus.com/bid/4650 - http://www.pldaniels.com/altermime/CHANGELOG
CVE ID: CVE-2002-1722 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Logitech iTouch keyboards allows attackers with physical access to the system to bypass the screen locking function and execute user-defined commands that have been assigned to a button. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/8994 - http://www.securityfocus.com/bid/4662 - http://online.securityfocus.com/archive/1/270702
CVE ID: CVE-2002-1723 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Powerboards 2.2b allows remote attackers to view the full path to the backend database by sending a cookie containing a non-existent username to profiles.php, which displays the full path in the error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.ifrance.com/kitetoua/tuto/powerboards.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/8824 - http://online.securityfocus.com/archive/82/266665
CVE ID: CVE-2002-1724 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:55.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability (XSS) in phpimageview.php for PHPImageView 1.0 allows remote attackers to execute arbitrary script as other users via the pic parameter. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/82/270970 - http://www.securityfocus.com/bid/4668 - http://www.ifrance.com/kitetoua/tuto/5holes4.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/9000
CVE ID: CVE-2002-1725 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via the pw=show option, which invokes the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4668 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9001 - http://www.ifrance.com/kitetoua/tuto/5holes4.txt - http://online.securityfocus.com/archive/82/270970/2002-12-21/2002-12-27/2
CVE ID: CVE-2002-1726 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: secure_inc.php in PhotoDB 1.4 allows remote attackers to bypass authentication via a URL with a large Time parameter, non-empty rmtusername and rmtpassword parameter, and an accesslevel parameter that is lower than the access level of the requested page. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/82/270970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9002 - http://www.securityfocus.com/bid/4669 - http://www.ifrance.com/kitetoua/tuto/5holes4.txt
CVE ID: CVE-2002-1727 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability (XSS) in (1) as_web.exe and (2) as_web4.exe in askSam Web Publisher 1 and 4 allows remote attackers to execute arbitrary script as other users via a URL. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/82/270970 - http://www.securityfocus.com/bid/4670 - http://www.ifrance.com/kitetoua/tuto/5holes4.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/9003
CVE ID: CVE-2002-1728 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: askSam Web Publisher 1.0 and 4.0 allows remote attackers to determine the full path to the web root directory via a request for a file that does not exist, which generates an error message that reveals the full path. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/82/270970 - http://www.securityfocus.com/bid/4670 - http://www.ifrance.com/kitetoua/tuto/5holes4.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/9004
CVE ID: CVE-2002-1729 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability (XSS) in ASPjar Guestbook 1.00 allows remote attackers to execute arbitrary script as other users via the "web site" parameter in a guestbook message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/9005 - http://online.securityfocus.com/archive/82/270970 - http://www.securityfocus.com/bid/4671 - http://www.ifrance.com/kitetoua/tuto/5holes4.txt
CVE ID: CVE-2002-1730 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the delete.asp administrative script with certain cookie values set to "true". Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/9006 - http://online.securityfocus.com/archive/82/270970 - http://www.securityfocus.com/bid/4671 - http://www.ifrance.com/kitetoua/tuto/5holes4.txt
CVE ID: CVE-2002-1731 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/8179 - http://www.securityfocus.com/bid/4059 - http://securitytracker.com/id?1003507
CVE ID: CVE-2002-1732 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Actinic Catalog 4.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string argument to certain .pl files, (2) the REFPAGE parameter to ca000007.pl, (3) PRODREF parameter to ss000007.pl, or (4) hop parameter to ca000001.pl. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/8180 - http://securitytracker.com/id?1003502 - http://www.osvdb.org/27095 - http://www.attrition.org/p
m/vulnerabilities/8180 - http://securitytracker.com/id?1003502 - http://www.osvdb.org/27095 - http://www.attrition.org/pipermail/vim/2006-July/000929.html - http://www.osvdb.org/27097 - http://www.securityfocus.com/bid/4042 - http://www.osvdb.org/27098 - http://www.osvdb.org/27096
CVE ID: CVE-2002-1733 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web-based message board in Prospero Technologies allows remote attackers to inject arbitrary web script or HTML via a message board post. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8184 - http://www.sentinelchicken.com/advisories/prospero/
CVE ID: CVE-2002-1734 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: NewsPro 1.01 allows remote attackers to gain unauthorized administrator access by setting their authentication cookie to "logged,true". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9007 - http://www.derkeiler.com/Mailing-Lists/securityfocus/vuln-dev/2002-05/0135.html
CVE ID: CVE-2002-1735 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in dlogin 1.0a could allow local users to gain privileges via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4043 - http://securitytracker.com/id?1003493 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8186
CVE ID: CVE-2002-1736 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in CGINews before 1.06 allow remote attackers to read arbitrary files via "unfiltered user input." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1003506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8187
CVE ID: CVE-2002-1737 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Astaro Security Linux 2.016 creates world-writable files and directories, which allows local users to overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/256124 - http://www.securityfocus.com/bid/4103 - http://online.securityfocus.com/archive/1/256127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8190
CVE ID: CVE-2002-1738 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which could allow remote attackers to send anonymous email. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9024 - http://online.securityfocus.com/archive/1/271374
CVE ID: CVE-2002-1739 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows local users to crack passwords. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/9025 - http://online.securityfocus.com/archive/1/271374 - http://www.securityfocus.com/bid/4686
CVE ID: CVE-2002-1740 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to execute arbitrary code via a long folder name (NewFolder parameter). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9026 - http://online.securityfocus.com/archive/1/271374
CVE ID: CVE-2002-1741 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to delete arbitrary files via a ".." (dot dot) in the Attachments parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4687 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9027 - http://online.securityfocus.com/archive/1/271374
CVE ID: CVE-2002-1742 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: SOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling a non-existent function in a script using a SOAP::Lite module, which causes the AUTOLOAD subroutine to trigger. Additional Analyst Notes: - CVE Program Container: References: - http://www.phrack.org/show.php?p=58&a=9 - http://use.perl.org/articles/02/04/09/000212.shtml?tid=5 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A02.asc - http://www.securityfocus.com/bid/4493 - http://www.phrack.com/show.php?p=58&a=9 -
RT/advisories/FreeBSD-SN-02%3A02.asc - http://www.securityfocus.com/bid/4493 - http://www.phrack.com/show.php?p=58&a=9 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8838 - http://online.securityfocus.com/archive/1/267051 - http://www.soaplite.com/
CVE ID: CVE-2002-1743 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service (crash) via a malformed .hpf file. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/267656 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8843 - http://www.securityfocus.com/bid/4514
CVE ID: CVE-2002-1744 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/8853 - http://online.securityfocus.com/archive/1/267945 - http://online.securityfocus.com/archive/1/268065 - http://www.securityfocus.com/bid/4525
CVE ID: CVE-2002-1745 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/8853 - http://online.securityfocus.com/archive/1/268303 - http://www.securityfocus.com/bid/4543
CVE ID: CVE-2002-1746 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2002/Jan/0119.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7870
CVE ID: CVE-2002-1747 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on ECB. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2002/Jan/0119.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7868
CVE ID: CVE-2002-1748 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitrary accounts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3839 - http://www.securityfocus.com/archive/1/249355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7863
CVE ID: CVE-2002-1749 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows 2000 Terminal Services, when using the disconnect feature of the client, does not properly lock itself if it is left idle until the screen saver activates and the user disconnects, which could allow attackers to gain administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4095 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8199 - http://www.ntbugtraq.com/default.aspx?pid=36&sid=1&A2=ind0202&L=ntbugtraq&T=0&O=D&F=N&P=5224
CVE ID: CVE-2002-1750 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: csGuestbook.cgi in CGISCRIPT.NET csGuestbook 1.0 allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function. Additional Analyst Notes: - CVE Program Container: References: - http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html - http://www.securityfocus.com/bid/4448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8636
CVE ID: CVE-2002-1751 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: csLiveSupport.cgi in CGIScript.net csLiveSupport allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function. Additional Analyst Notes: - CVE Program Container: References: - http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html - http://www.securityfocus.com/bid/4450 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8636
CVE ID: CVE-2002-1752 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: csChatRBox.cgi in CGIScript.net csChat-R-Box allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function. Additional Analyst Notes: - CVE Program Container: References: - http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html - http://www.securityfocus.com/bid/4452 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8636
CVE ID: CVE-2002-1753 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:56.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function. Additional Analyst Notes: - CVE Program Container: References: - http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html - http://www.securityfocus.com/bid/4451 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8636