Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-2785 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: cosmoshop 8.10.78 and earlier stores passwords in plaintext in the database, which allows local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16625/ - http://marc.info/?l=bugtraq&m=112534390600093&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22081
CVE ID: CVE-2005-2786 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in bestmail_edit.cgi in cosmoshop 8.10.78 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16625/ - http://marc.info/?l=bugtraq&m=112534390600093&w=2
CVE ID: CVE-2005-2787 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: comment_delete_cgi.php in Simple PHP Blog allows remote attackers to delete arbitrary files via the comment parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16616/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22096 - http://www.securityfocus.com/bid/14681 - http://marc.info/?l=bugtraq&m=112534658510762&w=2 - http://www.ftusecurity.com/pub/sphpblog_vulns
CVE ID: CVE-2005-2788 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to (1) events.php, (2) index.php, or (3) list.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14685 - http://marc.info/?l=bugtraq&m=112534574505945&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22047
CVE ID: CVE-2005-2789 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to bypass authentication via (1) an unknown attack vector or (2) a NULL (0x00) as a username. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22055 - http://aluigi.altervista.org/adv/bfccown-adv.txt - http://secunia.com/advisories/16629/ - http://marc.info/?l=bugtraq&m=112534155318828&w=2
CVE ID: CVE-2005-2790 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, relies on the client to enforce permissions and perform actions such as disconnections, which allows remote attackers to bypass administrative restrictions via a modified client. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14690 - http://aluigi.altervista.org/adv/bfccown-adv.txt - http://secunia.com/advisories/16629/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22057 - http:/
own-adv.txt - http://secunia.com/advisories/16629/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22057 - http://marc.info/?l=bugtraq&m=112534155318828&w=2
CVE ID: CVE-2005-2791 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to cause a denial of service (refused new connections) via a series of connections and disconnections without sending the login command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22060 - http://aluigi.altervista.org/adv/bfccown-adv.txt - http://secunia.com/advisories/16629/ - http://marc.info/?l=bugt
060 - http://aluigi.altervista.org/adv/bfccown-adv.txt - http://secunia.com/advisories/16629/ - http://marc.info/?l=bugtraq&m=112534155318828&w=2
CVE ID: CVE-2005-2792 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the custom_welcome_page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16617/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22103 - http://marc.info/?l=bugtraq&m=112542447219235&w=2 - http://www.securityfocus.com/bid/14695 - http://www.rgod.altervista.org/phpldap.html
CVE ID: CVE-2005-2793 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute arbitrary PHP code via the custom_welcome_page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16617/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22103 - http://marc.info/?l=bugtraq&m=112542447219235&w=2 - http://www.securityfocus.com/bid/14695 - http://www.rgod.altervista.org/phpldap.html
CVE ID: CVE-2005-2794 State: PUBLISHED Published: 2005-09-07T04:00:00 Last Updated: 2024-08-07T22:45:02.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10276 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:162 - http://www.securityfocus.com/bid/14761 - http://www.debian.org/security/2005/dsa-809 - http://www.novell.com/linux/secu
http://www.securityfocus.com/bid/14761 - http://www.debian.org/security/2005/dsa-809 - http://www.novell.com/linux/security/advisories/2005_53_squid.html - http://www.novell.com/linux/security/advisories/2005_21_sr.html - http://fedoranews.org/updates/FEDORA--.shtml - http://www.gentoo.org/security/en/glsa/glsa-200509-06.xml - http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE10-STORE_PENDING - http://www.redhat.com/support/errata/RHSA-2005-766.html - http://secunia.com/advisories/17027 - http://secunia.com/advisories/16977
CVE ID: CVE-2005-2795 State: REJECTED Published: 2021-06-18T14:29:34 Last Updated: 2021-06-18T14:29:34 Description: No description available.
CVE ID: CVE-2005-2796 State: PUBLISHED Published: 2005-09-07T04:00:00 Last Updated: 2024-08-07T22:45:02.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14731 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10522 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:162 - http://securitytracker.com/id?1014846 - http://www.debian.org/security/2005/dsa-809 -
/advisories?name=MDKSA-2005:162 - http://securitytracker.com/id?1014846 - http://www.debian.org/security/2005/dsa-809 - http://www.novell.com/linux/security/advisories/2005_53_squid.html - http://www.novell.com/linux/security/advisories/2005_21_sr.html - http://fedoranews.org/updates/FEDORA--.shtml - http://www.gentoo.org/security/en/glsa/glsa-200509-06.xml - http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE10-sslConnectTimeout - http://www.redhat.com/support/errata/RHSA-2005-766.html - http://secunia.com/advisories/17027 - http://secunia.com/advisories/16977
CVE ID: CVE-2005-2797 State: PUBLISHED Published: 2005-09-06T04:00:00 Last Updated: 2024-08-07T22:45:02.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding ("-D" option) when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts functionality. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.53/SCOSA-2005.53.txt - http://secunia.com/advisories/19243 - http://marc.info/?l=bugtraq&m=112605977304049&w=2 - http://www.osvdb.org/19142 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-20
raq&m=112605977304049&w=2 - http://www.osvdb.org/19142 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-2006.11.txt - http://secunia.com/advisories/18661 - http://secunia.com/advisories/18010 - http://www.mindrot.org/pipermail/openssh-unix-announce/2005-September/000083.html - http://support.avaya.com/elmodocs2/security/ASA-2006-033.htm - http://www.securityfocus.com/bid/14727 - http://securitytracker.com/id?1014845 - http://secunia.com/advisories/16686
CVE ID: CVE-2005-2798 State: PUBLISHED Published: 2005-09-06T04:00:00 Last Updated: 2024-08-07T22:45:02.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-527.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24064 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.53/SCOSA-2005.53.txt - http://secunia.com/advisories/18507
ies/24064 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.53/SCOSA-2005.53.txt - http://secunia.com/advisories/18507 - http://www.securityfocus.com/archive/1/421411/100/0/threaded - http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html - http://www.osvdb.org/19141 - http://www.securityfocus.com/archive/1/421411/100/0/threaded - http://secunia.com/advisories/18406 - http://www.securityfocus.com/bid/14729 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9717 - http://secunia.com/advisories/18717 - http://secunia.com/advisories/17077 - http://www.vupen.com/english/advisories/2006/0144 - https://oval.cisecurity.org/repository/search/d
m/advisories/17077 - http://www.vupen.com/english/advisories/2006/0144 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1566 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1345 - http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm - http://secunia.com/advisories/17245 - http://secunia.com/advisories/18661 - http://secunia.com/advisories/18010 - http://www.mindrot.org/pipermail/openssh-unix-announce/2005-September/000083.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:172 - http://support.avaya.com/elmodocs2/security/ASA-2006-033.htm - http://securitytracker.com/id?1014845 - https://u
5:172 - http://support.avaya.com/elmodocs2/security/ASA-2006-033.htm - http://securitytracker.com/id?1014845 - https://usn.ubuntu.com/209-1/ - http://secunia.com/advisories/16686
CVE ID: CVE-2005-2799 State: PUBLISHED Published: 2005-09-15T04:00:00Z Last Updated: 2024-09-16T18:14:13.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execute arbitrary code via a long HTTP POST request. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=305&type=vulnerabilities
CVE ID: CVE-2005-2800 State: PUBLISHED Published: 2005-09-06T04:00:00 Last Updated: 2024-08-07T22:45:02.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows local users to cause a denial of service (memory consumption) via certain repeated reads from the /proc/scsi/sg/devices file, which is not properly handled when the next() iterator returns NULL or an error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14790 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://www.redhat.com/support/er
focus.com/bid/14790 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://www.redhat.com/support/errata/RHSA-2006-0101.html - http://www.securityfocus.com/archive/1/419522/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9954 - http://secunia.com/advisories/18510 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 - http://secunia.com/advisories/17826 - http://secunia.com/advisories/17918 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://www.debian.org/security/2006/dsa-1017 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=729d70f5dfd663b44b
06/dsa-1017 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=729d70f5dfd663b44bca68a4479c96bde7e535d6 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://secunia.com/advisories/19374
CVE ID: CVE-2005-2801 State: PUBLISHED Published: 2005-09-06T04:00:00 Last Updated: 2024-08-07T22:45:02.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the name_index fields when sharing xattr blocks, which could prevent default ACLs from being applied. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18056 - http://secunia.com/advisories/17073 - http://www.redhat.com/support/errata/RHSA-2006-0144.html - http://www.novell.com/linux/security/advisories/2005_18_kernel.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg
.com/linux/security/advisories/2005_18_kernel.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10495 - http://secunia.com/advisories/18059 - http://acl.bestbits.at/pipermail/acl-devel/2005-February/001848.html - http://lists.debian.org/debian-kernel/2005/08/msg00238.html - http://www.debian.org/security/2005/dsa-922 - http://www.debian.org/security/2005/dsa-921 - http://www.redhat.com/support/errata/RHSA-2005-514.html - http://secunia.com/advisories/17826 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://www.securityfocus.com/bid/14793 - http://secunia.com/advi
.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://www.securityfocus.com/bid/14793 - http://secunia.com/advisories/19252
CVE ID: CVE-2005-2802 State: REJECTED Published: 2005-09-06T04:00:00 Last Updated: 2005-09-15T09:00:00 Description: No description available.
CVE ID: CVE-2005-2803 State: PUBLISHED Published: 2005-09-06T04:00:00 Last Updated: 2024-08-07T22:45:02.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Hiki 0.8.1 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via a page name in a Login link, a different vulnerability than CVE-2005-2336. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15021 - http://secunia.com/advisories/17075 - http://hikiwiki.org/en/advisory20050804.html - http://jvn.jp/jp/JVN%2338138980
CVE ID: CVE-2005-2804 State: PUBLISHED Published: 2005-10-04T04:00:00 Last Updated: 2024-08-07T22:45:02.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the registry parsing code in GroupWise 6.5.3, and possibly earlier version, allows remote attackers to cause a denial of service (application crash) via a large TCP/IP port in the Windows registry key. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0763.html - http://www.osvdb.org/19862 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098814.htm - http://support.novell.com/techcenter/search/search.do?cmd=displayKC&doc
com/cgi-bin/search/searchtid.cgi?/10098814.htm - http://support.novell.com/techcenter/search/search.do?cmd=displayKC&docType=%20c&externalId=10098814html&sliceId=&dialogID=717171 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22419 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037442.html - http://www.infobyte.com.ar/adv/ISR-13.html - http://securitytracker.com/id?1014977 - http://www.securityfocus.com/bid/14952 - http://marc.info/?l=bugtraq&m=112784386426802&w=2 - http://securityreason.com/securityalert/28
CVE ID: CVE-2005-2805 State: PUBLISHED Published: 2005-09-06T04:00:00 Last Updated: 2024-08-07T22:45:02.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: forum_post.php in e107 0.6 allows remote attackers to post to non-existent forums by modifying the forum number. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112544896117131&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22059 - http://www.securityfocus.com/bid/14699
CVE ID: CVE-2005-2806 State: PUBLISHED Published: 2005-09-06T04:00:00 Last Updated: 2024-08-07T22:45:02.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: client.cpp in BNBT EasyTracker 7.7r3.2004.10.27 and earlier allows remote attackers to cause a denial of service (application hang) via an HTTP header containing only a ":" (colon), possibly leading to an integer signedness error due to a missing field name or value. Additional Analyst Notes: - CVE Program Container: References: - http://secway.org/advisory/AD20050830.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/22058 - http://marc.info/?l=bugtraq&m=112542080127451&w=2 - http://www.securityfocus.com/bid/14700 - h
m/vulnerabilities/22058 - http://marc.info/?l=bugtraq&m=112542080127451&w=2 - http://www.securityfocus.com/bid/14700 - http://secunia.com/advisories/16613/
CVE ID: CVE-2005-2807 State: PUBLISHED Published: 2005-09-07T04:00:00Z Last Updated: 2024-09-17T03:27:57.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, which allows local users to read portions of arbitrary files via the -f command line option. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14711 - http://www.securityfocus.com/archive/1/409667
CVE ID: CVE-2005-2808 State: PUBLISHED Published: 2005-09-07T04:00:00Z Last Updated: 2024-09-17T01:37:05.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: frox 0.7.16 and 0.7.17 does not properly parse certain Deny ACLs, which might allow attackers to bypass intended restrictions and access blocked hosts. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013089 - http://sourceforge.net/mailarchive/forum.php?thread_id=6492850&forum_id=1822 - http://www.osvdb.org/13615 - http://secunia.com/advisories/14182
CVE ID: CVE-2005-2809 State: PUBLISHED Published: 2005-09-07T04:00:00 Last Updated: 2024-08-07T22:45:02.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.[PID].stats temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16659/ - http://www.zataz.net/adviso/silc-server-toolkit-06152005.txt - http://www.securityfocus.com/bid/14716 - http://www.securityfocus.com/archive/1/409672 - http://bugs.gentoo.org/show_bug.cgi?id=94587
CVE ID: CVE-2005-2810 State: PUBLISHED Published: 2005-09-07T04:00:00 Last Updated: 2024-08-07T22:45:02.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in urban before 1.5.3 allow local users to gain privileges via a long HOME environment variable to (1) config.cc, (2) game.cc, (3) highscor.cc, or (4) meny.cc. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112604855119036&w=2 - http://www.vuxml.org/freebsd/08df5d46-1baf-11da-8038-0040f42d58c6.html - http://securitytracker.com/id?1014848 - http://www.freebsd.org/cgi/cvsweb.cgi/ports/games/urban/files/
CVE ID: CVE-2005-2811 State: PUBLISHED Published: 2005-09-07T04:00:00Z Last Updated: 2024-09-17T02:46:53.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Net-SNMP 5.2.1.2 and earlier, on Gentoo Linux, installs certain Perl modules with an insecure DT_RPATH, which could allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200509-05.xml
CVE ID: CVE-2005-2812 State: PUBLISHED Published: 2005-09-07T04:00:00Z Last Updated: 2024-09-17T04:24:05.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: man2web allows remote attackers to execute arbitrary commands via -P arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14747
CVE ID: CVE-2005-2813 State: PUBLISHED Published: 2005-09-07T04:00:00 Last Updated: 2024-08-07T22:45:02.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in FlatNuke 2.5.6 and possibly earlier allows remote attackers to read arbitrary files via ".." sequences and "%00" (trailing null byte) characters in the id parameter to the read mod in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14702 - http://secunia.com/advisories/16650/ - http://securitytracker.com/id?1014824 - http://www.securityfocus.com/archive/1/419107/100/0/threaded - http://www.securityfocus.com/bid/15796 - http://secu
24 - http://www.securityfocus.com/archive/1/419107/100/0/threaded - http://www.securityfocus.com/bid/15796 - http://securitytracker.com/id?1015339 - http://seclists.org/lists/bugtraq/2005/Aug/0440.html
CVE ID: CVE-2005-2814 State: PUBLISHED Published: 2005-09-07T04:00:00 Last Updated: 2024-08-07T22:45:02.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the usr parameter in a vis_reg operation to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22101 - http://securitytracker.com/id?1014824 - http://seclists.org/lists/bugtraq/2005/Aug/0440.html - http://www.securityfocus.com/bid/14704