Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-1349 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Convert-UUlib (Convert::UUlib) before 1.051 allows remote attackers to execute arbitrary code via a malformed parameter to a read operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13401 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20275 - http://secunia.com/advisories/15130 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:022 - http://www.gentoo.org/security/en/glsa/glsa-200504-26.xml
CVE ID: CVE-2005-1350 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111446285915444&w=2
CVE ID: CVE-2005-1351 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ad.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111446285915444&w=2
CVE ID: CVE-2005-1352 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the ad.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111446285915444&w=2
CVE ID: CVE-2005-1353 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111446056205059&w=2
CVE ID: CVE-2005-1354 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: The forum.pl script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111446056205059&w=2
CVE ID: CVE-2005-1355 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a similar vulnerability to CVE-2005-0801. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111445548126797&w=2
CVE ID: CVE-2005-1356 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in includer.cgi script in The Includer allows remote attackers to inject arbitrary web script or HTML via the argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111445548126797&w=2
CVE ID: CVE-2005-1357 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111445867315415&w=2
CVE ID: CVE-2005-1358 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: text.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111445867315415&w=2
CVE ID: CVE-2005-1359 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in text.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111445867315415&w=2
CVE ID: CVE-2005-1360 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in error.php in GrayCMS 1.1 allows remote attackers to execute arbitrary PHP code by modifying the path_prefix parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20278 - http://marc.info/?l=bugtraq&m=111454354214982&w=2 - http://secunia.com/advisories/15133 - http://www.osvdb.org/15860 - http://www.securityfocus.com/bid/13381
CVE ID: CVE-2005-1361 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MetaCart e-Shop 8.0 allow remote attackers to execute arbitrary SQL commands via the (1) intProdID parameter in product.asp or (2) strCatalog_NAME parameter to productsByCategory.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13376 - http://marc.info/?l=bugtraq&m=111453994718211&w=2 - http://www.securityfocus.com/bid/13377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20283
CVE ID: CVE-2005-1362 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MetaCart 2.0 for Paypal allow remote attackers to execute arbitrary SQL commands via the (1) intProdID parameter to product.asp, (2) intCatalogID or (3) strSubCatalogID parameters to productsByCategory.asp, (4) chkText, (5) strText, (6) chkPrice, (7) intPrice, (8) chkCat, or (9) strCat parameters to searchAction.asp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111454090503662&w=2
CVE ID: CVE-2005-1363 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MetaCart 2.0 for PayFlow allow remote attackers to execute arbitrary commands via (1) intCatalogID, (2) strSubCatalogID, or (3) strSubCatalog_NAME parameter to productsByCategory.asp, (4) curCatalogID, (5) strSubCatalog_NAME, (6) intCatalogID, or (7) page parameter to productsByCategory.asp or (8) intProdID parameter to product.asp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111454142832023&w=2
CVE ID: CVE-2005-1364 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password fields in logIn.asp, or (3) intAuctionID parameter to item.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15869 - http://www.securityfocus.com/bid/13395 - http://secunia.com/advisories/15136 - http://www.osvdb.org/15868 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20286 - http://marc.info/?l=bugtraq&m=111454192928364&w=2 -
5868 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20286 - http://marc.info/?l=bugtraq&m=111454192928364&w=2 - http://digitalparadox.org/advisories/metabid.txt
CVE ID: CVE-2005-1365 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:44:06.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (slash) characters and ".." sequences. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=111625635716712&w=2 - http://www.redteam-pentesting.de/advisories/rt-sa-2005-010.txt - http://www.securityfocus.com/bid/13642 - http://sourceforge.net/project/shownotes.php?release_id=327708
CVE ID: CVE-2005-1366 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:44:06.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cgi-bin" in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.redteam-pentesting.de/advisories/rt-sa-2005-011.txt - http://www.securityfocus.com/bid/13638 - http://sourceforge.net/project/shownotes.php?release_id=327708 - http://marc.info/?l=full-disclosure&m=111625623909003&w=2
CVE ID: CVE-2005-1367 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:44:06.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root. Additional Analyst Notes: - CVE Program Container: References: - http://www.redteam-pentesting.de/advisories/rt-sa-2005-012.txt - http://marc.info/?l=full-disclosure&m=111625623909003&w=2
CVE ID: CVE-2005-1368 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:44:06.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: The key_user_lookup function in security/keys/key.c in Linux kernel 2.6.10 to 2.6.11.8 may allow attackers to cause a denial of service (oops) via SMP. Additional Analyst Notes: - CVE Program Container: References: - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.8 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://linux.bkbits.net:8080/linux-2.6/cset%40423078fafVa6mAyny23YZ87hDipmTw
CVE ID: CVE-2005-1369 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:44:06.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) it87 and (2) via686a drivers in I2C for Linux 2.6.x before 2.6.11.8, and 2.6.12 before 2.6.12-rc2, create the sysfs "alarms" file with write permissions, which allows local users to cause a denial of service (CPU consumption) by attempting to write to the file, which does not have an associated store function. Additional Analyst Notes: - CVE Program Container: References: - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.8 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://lkml.org/lkml/20
/kernel/v2.6/ChangeLog-2.6.11.8 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://lkml.org/lkml/2005/4/20/159
CVE ID: CVE-2005-1370 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:44:06.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Radia Management Agent (RMA) in HP OpenView Radia Management Portal (RMP) 1.x and 2.x allows remote attackers to execute arbitrary commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2005-04/0490.html - http://secunia.com/advisories/15089 - http://www.securityfocus.com/bid/13414 - http://archives.neohapsis.com/archives/bugtraq/2005-04/0490.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/20307 - http://
.neohapsis.com/archives/bugtraq/2005-04/0490.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/20307 - http://marc.info/?l=bugtraq&m=111471365231909&w=2 - http://www.osvdb.org/15960 - http://securitytracker.com/id?1013829
CVE ID: CVE-2005-1371 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:48.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through the Help menu, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111464474828477&w=2 - http://www.securityfocus.com/bid/13410 - http://secunia.com/advisories/15152 - http://www.osvdb.org/15898 - http://www.vupen.com/english/advisories/2005/0419 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20301
CVE ID: CVE-2005-1372 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:48.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20302 - http://marc.info/?l=bugtraq&m=111464410324243&w=2 - http://www.osvdb.org/15900 - http://secunia.com/advisories/15158/ - http://www.vupen.com/english/advisories/2005/0420 - http://www.securityfocus.com/bid/13408
CVE ID: CVE-2005-1373 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:48.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Dream4 Koobi CMS 4.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) q or (2) p parameters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111464009913703&w=2 - http://www.securityfocus.com/bid/13413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20293 - http://www.securityfocus.com/bid/13412 - http://www.osvdb.org/15997 - http://secunia.com/advisories/14696
CVE ID: CVE-2005-1374 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:48.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to inject arbitrary web script or HTML via (1) exercise_result.php, (2) exercice_submit.php, (3) agenda.php, (4) learningPathList.php, (5) learningPathAdmin.php, (6) learningPath.php, (7) userLog.php, (8) tool parameter to toolaccess_details.php, (9) data parameter to user_access_details.php, or (10) coursePath parameter to myagenda.php. Additional Analyst Notes: - CVE Program Cont
r to user_access_details.php, or (10) coursePath parameter to myagenda.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13407 - http://secunia.com/advisories/15161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20295 - http://marc.info/?l=bugtraq&m=111464607103407&w=2 - http://www.claroline.net/news.php#85 - http://securitytracker.com/id?1013822 - http://secunia.com/advisories/15725
CVE ID: CVE-2005-1375 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:48.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary SQL commands via (1) learningPath.php, (2) learningPathAdmin.php, (3) learnPath_details.php, (4) modules_pool.php, (5) module.php, (6) uInfo parameter in userInfo.php, or (7) exo_id parameter to exercises_details.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13407 - http://secunia.com/advisories/15161 - http://marc.in
m Container: References: - http://www.securityfocus.com/bid/13407 - http://secunia.com/advisories/15161 - http://marc.info/?l=bugtraq&m=111464607103407&w=2 - http://www.claroline.net/news.php#85 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20298 - http://securitytracker.com/id?1013822 - http://secunia.com/advisories/15725
CVE ID: CVE-2005-1376 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:50.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in (1) document.php or (2) insertMyDoc.php in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote project administrators to upload arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13407 - http://secunia.com/advisories/15161 - http://marc.info/?l=bugtraq&m=111464607103407&w=2 - http://www.claroline.net/news.php#85 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20287 - http://secur
7&w=2 - http://www.claroline.net/news.php#85 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20287 - http://securitytracker.com/id?1013822 - http://secunia.com/advisories/15725
CVE ID: CVE-2005-1377 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:50.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary PHP code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13407 - http://secunia.com/advisories/15161 - http://marc.info/?l=bugtraq&m=111464607103407&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20300 - http://www.claroline.net/news.php#85 - http://securitytracker.com/id?1013822
force.ibmcloud.com/vulnerabilities/20300 - http://www.claroline.net/news.php#85 - http://securitytracker.com/id?1013822 - http://secunia.com/advisories/15725
CVE ID: CVE-2005-1378 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:49.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in posting_notes.php in the notes module for phpBB allows remote attackers to execute arbitrary SQL commands via the p parameter, which is used in the $post_id variable, and other attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111471606518372&w=2 - http://securitytracker.com/id?1013827 - http://www.securityfocus.com/bid/13417 - http://www.vupen.com/english/advisories/2005/0416 - http://www.gulftech.org/?node=research&article_id=00070-04
d/13417 - http://www.vupen.com/english/advisories/2005/0416 - http://www.gulftech.org/?node=research&article_id=00070-04272005 - http://www.osvdb.org/15899 - http://secunia.com/advisories/15154/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/20303
CVE ID: CVE-2005-1379 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:48.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LAM runtime environment package (lam-runtime-7.0.6-2mdk) on Mandrake Linux installs the mpi user without a password, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13431 - http://marc.info/?l=bugtraq&m=111472262231060&w=2
CVE ID: CVE-2005-1380 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:48.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in BEA Admin Console 8.1 allows remote attackers to execute arbitrary web script or HTML via the server parameter to a JndiFramesetAction action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15128 - http://www.osvdb.org/15895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20276 - http://www.red-database-security.com/advisory/bea_css_in_admin_console.html - http://securitytracker.com/alerts/2005/Apr/1013817.html - http://marc.info
.com/advisory/bea_css_in_admin_console.html - http://securitytracker.com/alerts/2005/Apr/1013817.html - http://marc.info/?l=bugtraq&m=111472745503010&w=2 - http://www.securityfocus.com/bid/13400
CVE ID: CVE-2005-1381 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:49.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via the (1) cache_dump_file or (2) PartialPageErrorPage parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20309 - http://www.red-database-security.com/advisory/oracle_webcache_CSS_vulnerabilities.html - http://marc.info/?l=bugtraq&m=111472423409560&w=2 - http://www.securityfocus.com/bid/13421 - http://www.securityfo
tml - http://marc.info/?l=bugtraq&m=111472423409560&w=2 - http://www.securityfocus.com/bid/13421 - http://www.securityfocus.com/bid/13422 - http://secunia.com/advisories/15143 - http://www.osvdb.org/15910
CVE ID: CVE-2005-1382 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:49.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: The webcacheadmin module in Oracle Webcache 9i allows remote attackers to corrupt arbitrary files via a full pathname in the cache_dump_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_webcache_append_file_vulnerabilitiy.html - http://marc.info/?l=bugtraq&m=111472615519295&w=2 - http://secunia.com/advisories/15143 - http://www.osvdb.org/15909 - http://www.securityfocus.com/bid/13420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20310
CVE ID: CVE-2005-1383 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:50.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP Server mod_access restrictions via a request to the webcache TCP port 7778. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13418 - http://marc.info/?l=bugtraq&m=111472266123952&w=2 - http://www.red-database-security.com/advisory/oracle_webcache_bypass.html - http://www.osvdb.org/15908 - http://secunia.com/advisories/15143 - https://exchange.
isory/oracle_webcache_bypass.html - http://www.osvdb.org/15908 - http://secunia.com/advisories/15143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20311
CVE ID: CVE-2005-1384 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:48.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to index.php, (2) phpcoinsessid parameter to login.php, (3) id, (4) dtopic_id, or (5) dcat_id to mod.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20308 - http://marc.info/?l=bugtraq&m=111473522804665&w=2 - http://securitytracker.com/id?1013834 - http://pridels0.blogspot.com/2006/03/phpcoin-poc.html - http://dig
2804665&w=2 - http://securitytracker.com/id?1013834 - http://pridels0.blogspot.com/2006/03/phpcoin-poc.html - http://digitalparadox.org/viewadvisories.ah?view=36 - http://www.securityfocus.com/bid/13433 - http://www.vupen.com/english/advisories/2005/0423