Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-2333 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bodington 2.1.0 RC1 and earlier does not secure the file upload area, which allows remote attackers to read uploaded files. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14986 - http://sourceforge.net/tracker/index.php?func=detail&aid=789761&group_id=87659&atid=583930 - http://www.securityfocus.com/bid/9528 - http://www.secunia.com/advisories/10749/
CVE ID: CVE-2004-2334 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EMU Webmail 5.2.7 allow remote attackers to inject arbitrary web script or HTML via (1) a hex-encoded value to the variable parameter in emumail.fcgi, (2) the folder parameter in emumail.fcgi, or Javascript in the (3) username or (4) password field in the login page. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15452 - http://members.lycos.co.uk/r34ct/main/emu/emu.txt - http://secunia.com/advisories/1
ibmcloud.com/vulnerabilities/15452 - http://members.lycos.co.uk/r34ct/main/emu/emu.txt - http://secunia.com/advisories/11110 - http://www.zone-h.com/advisories/read/id=4141 - http://www.securityfocus.com/bid/9861 - http://www.osvdb.org/4204 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15451 - http://www.osvdb.org/4972 - http://securitytracker.com/id?1009397
CVE ID: CVE-2004-2335 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Macromedia installers and e-licensing client on Mac OS X, as used for Macromedia Contribute 2, Director, Dreamweaver, Fireworks, Flash, and Studio, install the AuthenticationService setuid and writable by other users, which allows local users to gain privileges by modifying the program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15465 - http://secunia.com/advisories/11123 - http://www.macromedia.com/devnet/sec
e.xforce.ibmcloud.com/vulnerabilities/15465 - http://secunia.com/advisories/11123 - http://www.macromedia.com/devnet/security/security_zone/mpsb04-03.html
CVE ID: CVE-2004-2336 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Novell GroupWise and GroupWise WebAccess 6.0 through 6.5, when running with Apache Web Server 1.3 for NetWare where Apache is loaded using GWAPACHE.CONF, allows remote attackers to read directories and files on the server. Additional Analyst Notes: - CVE Program Container: References: - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10091330.htm - http://www.securitytracker.com/alerts/2004/Mar/1009417.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15467 - http://secunia.com/adviso
om/alerts/2004/Mar/1009417.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15467 - http://secunia.com/advisories/11119 - http://www.securityfocus.com/bid/9864
CVE ID: CVE-2004-2337 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: The /.inlook/.crypt file for inlook 0.7.3 and earlier is installed with world readable permissions, which allows local users to obtain user POP3 credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3771 - http://secunia.com/advisories/10752/ - https://sourceforge.net/project/shownotes.php?release_id=213427 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14990 - http://www.securityfocus.com/bid/9527
CVE ID: CVE-2004-2338 State: PUBLISHED Published: 2005-08-16T04:00:00Z Last Updated: 2024-09-16T22:02:03.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenBSD 3.3 and 3.4 does not properly parse Accept and Deny rules without netmasks on big-endian 64-bit platforms such as SPARC64, which may allow remote attackers to bypass access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.openbsd.org/errata34.html - http://www.securityfocus.com/bid/9867 - http://www.openbsd.org/errata33.html
CVE ID: CVE-2004-2339 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2025-01-16T19:40:39.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 2000, XP, and possibly 2003 allows local users with the SeDebugPrivilege privilege to execute arbitrary code as kernel and read or write kernel memory via the NtSystemDebugControl function, which does not verify its pointer arguments. Note: this issue has been disputed, since Administrator privileges are typically required to exploit this issue, thus privilege boundaries are not crossed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id?
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id?1009128 - http://archives.neohapsis.com/archives/bugtraq/2004-02/0529.html - http://www.securityfocus.com/archive/1/354392 - http://archives.neohapsis.com/archives/bugtraq/2004-02/0530.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15263
CVE ID: CVE-2004-2340 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: ** UNVERIFIABLE ** SQL injection vulnerability in PunkBuster Screenshot Database (PB-DB) Alpha 6 allows remote attackers to execute arbitrary SQL commands via the username and password fields of the login form. NOTE: the original vulnerability report contains several significant inconsistencies that make it unclear whether the report is accurate, including (1) PB-DB is really the "PunkBuster Screenshot Database" and not "PunkBuster" itself; (2) there is no apparent association between PunkBuster and "Punky Brewster"; (3) the c
se" and not "PunkBuster" itself; (2) there is no apparent association between PunkBuster and "Punky Brewster"; (3) the claimed source code is not anywhere in Alpha 6. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15267 - http://securitytracker.com/id?1009145 - http://www.securityfocus.com/archive/1/354453 - http://www.osvdb.org/18981
CVE ID: CVE-2004-2341 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP file include injection vulnerability in isearch.inc.php for iSearch allows remote attackers to execute arbitrary code via the isearch_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15009 - http://www.securitytracker.com/alerts/2004/Feb/1008900.html
CVE ID: CVE-2004-2342 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: ChatterBox 2.0 allows remote attackers to cause a denial of service (server crash) via a malformed request to the server, as demonstrated using "aaaaaa". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9532 - http://www.osvdb.org/3798 - http://www.autistici.org/fdonato/advisory/ChatterBox2.0-adv.txt - http://www.securityfocus.com/archive/1/352341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15011 - http://secunia.com/advisories/10775
CVE ID: CVE-2004-2343 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. NOTE: the vendor has disputed this issue, since the .htaccess mechanism is only intended to restrict external web access, and a local user already has the privileges to perform the same operations without using ErrorDocument Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugt
rorDocument Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2004-02/0064.html - http://archives.neohapsis.com/archives/bugtraq/2004-02/0120.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15015 - http://archives.neohapsis.com/archives/bugtraq/2004-02/0043.html
CVE ID: CVE-2004-2344 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the ASN.1/H.323/H.225 stack of VocalTec VGW120 and VGW480 allows remote attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10411 - http://www.securitylab.ru/45401.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16240
CVE ID: CVE-2004-2345 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:14.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown multiple vulnerabilities in Oracle9i Database Server 9.0.1.4, 9.0.1.5, 9.2.0.3, and 9.2.0.4 allow local users with the ability to invoke SQL to cause a denial of service or obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15271 - http://www.securityfocus.com/bid/9705 - http://otn.oracle.com/deploy/security/pdf/2004alert64.pdf
CVE ID: CVE-2004-2346 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Forum Web Server 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the Subject field in post1.htm and (2) the File Description field in postfile2.htm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/alerts/2004/Feb/1008896.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15018
CVE ID: CVE-2004-2347 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: blog.cgi in Leif M. Wright Web Blog 1.1 and 1.1.5 allows remote attackers to execute arbitrary commands via shell metacharacters such as '|' in the file parameter of ViewFile requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9539 - http://www.osvdb.org/3793 - http://secunia.com/advisories/10776/ - http://leifwright.com/scripts/Blog.html - http://www.securityfocus.com/archive/1/352303 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15019
CVE ID: CVE-2004-2348 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sybari AntiGen for Domino 7.0 Build 722 SR2 allows remote attackers to cause a denial of service (hang) via an encrypted ZIP file with the "include full path info" option set, as used by certain variants of the Beagle/Bagle worm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15470 - http://securitytracker.com/id?1009437 - http://secunia.com/advisories/11120/
CVE ID: CVE-2004-2349 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Tunez before 1.20-pre2 allow remote attackers to execute arbitrary SQL queries. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10770/ - http://www.securityfocus.com/bid/9565 - http://sourceforge.net/tracker/index.php?func=detail&aid=879391&group_id=2266&atid=102266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15020
CVE ID: CVE-2004-2350 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL and gain privileges via the search_results parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9883 - http://www.securityfocus.com/archive/1/357442 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15475
CVE ID: CVE-2004-2351 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) name, (2) email, (3) city, and (4) message, which do not use the <script> and <style> tags, which are filtered by PHP-Nuke. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/352373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15027 - http://securitytracker.com/id?1008930 - http://www.securityfocus.
//exchange.xforce.ibmcloud.com/vulnerabilities/15027 - http://securitytracker.com/id?1008930 - http://www.securityfocus.com/bid/9559
CVE ID: CVE-2004-2352 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in GBook for PHP-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via cookies that are stored in the $_COOKIE PHP variable, which is not cleansed by PHP-Nuke. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/352373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15027 - http://securitytracker.com/id?1008930 - http://www.securityfocus.com/bid/9559
CVE ID: CVE-2004-2353 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: BugPort before 1.099 stores its configuration file (conf/config.conf) under the web document root with a file extension that is not normally parsed by web servers, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15030 - http://secunia.com/advisories/10785/ - http://www.incogen.com/downloads/bugport/CHANGELOG.txt
CVE ID: CVE-2004-2354 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in 4nGuestbook 0.92 for PHP-Nuke 6.5 through 6.9 allows remote attackers to modify SQL statements via the entry parameter to modules.php, which can also facilitate cross-site scripting (XSS) attacks when MySQL errors are triggered. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15478 - http://archives.neohapsis.com/archives/bugtraq/2004-03/0139.html
CVE ID: CVE-2004-2355 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Crafty Syntax Live Help (CSLH) before 2.7.4 allows remote attackers to inject arbitrary web script or HTML via the name field of a livehelp or chat session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10463 - http://www.craftysyntax.com/CHANGELOG.txt - http://www.osvdb.org/6744 - http://secunia.com/advisories/11789 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0054.html - https://exchange.xforce.ibmcloud.com/vulnerabili
89 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0054.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16321
CVE ID: CVE-2004-2356 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Early termination vulnerability in Fizmez Web Server 1.0 allows remote attackers to cause a denial of service (crash) by connecting to the server and then disconnecting without sending any data, which triggers a null pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11141/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/15506 - http://securitytracker.com/id?1009451 - http://www.autistici.org/fdonato/advisory/fws1.0-adv.txt - http://www.securityfocus.com/b
curitytracker.com/id?1009451 - http://www.autistici.org/fdonato/advisory/fws1.0-adv.txt - http://www.securityfocus.com/bid/9894
CVE ID: CVE-2004-2357 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: The embedded MySQL 4.0 server for Proofpoint Protection Server does not require a password for the root user of MySQL, which allows remote attackers to read or modify the backend database. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=107745676915297&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15280 - http://marc.info/?l=full-disclosure&m=107752568009182&w=2
CVE ID: CVE-2004-2358 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin_words.php for phpBB 2.0.6c allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15579 - http://archives.neohapsis.com/archives/bugtraq/2004-03/0219.html - http://www.securityfocus.com/bid/9896
CVE ID: CVE-2004-2359 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started from the systray applet, which allows local users to gain privileges by accessing the Help functionality. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10949 - http://securitytracker.com/id?1009174 - http://www.securityfocus.com/bid/9714 - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0042.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/1
p://archives.neohapsis.com/archives/vulnwatch/2004-q1/0042.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15285
CVE ID: CVE-2004-2360 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Targem Battle Mages 1.0 allows remote attackers to cause a denial of service (infinite loop) via a UDP packet with incomplete data, which causes the server to enter an infinite loop while waiting to read the rest of the data that is not sent. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15487 - http://aluigi.altervista.org/adv/battlemages-adv.txt - http://www.securityfocus.com/bid/9849 - http://cert.uni-stuttgart.de/archive/bugtraq/2004/03/msg00103.html
CVE ID: CVE-2004-2361 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Digital Reality game engine, as used in Haegemonia 1.0 through 1.0.7 and Desert Rats vs. Afrika Korps 1.0, allows remote attackers to cause a denial of service (crash) via a chat message with a large message size, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107764783411414&w=2 - http://www.osvdb.org/10632 - http://www.osvdb.org/10631 - http://www.securityfocus.com/bid/9736 - http://aluigi.altervista.org/adv/hgmcrash-adv.txt - https://excha
db.org/10631 - http://www.securityfocus.com/bid/9736 - http://aluigi.altervista.org/adv/hgmcrash-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/15307
CVE ID: CVE-2004-2362 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPX 3.2.6 and earlier allows remote attackers to obtain the physical path of PHPX via a null or invalid value in the limit parameter, which leaks the pathname in a database error message, as demonstrated using forums.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpx.org/project.php?action=view&project_id=1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16064 - http://securitytracker.com/id?1010061 - http://www.securityfocus.com/archive/1/362230 - http://www.osvdb.org/5906 - http://s
://securitytracker.com/id?1010061 - http://www.securityfocus.com/archive/1/362230 - http://www.osvdb.org/5906 - http://secunia.com/advisories/11554
CVE ID: CVE-2004-2363 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Validate-Before-Canonicalize vulnerability in the checkURI function in functions.inc.php in PHPX 3.0 through 3.2.6 allows remote attackers to conduct cross-site scripting (XSS) attacks via hex-encoded tags, which bypass the check for literal "<", ">", "(", and ")" characters, as demonstrated using the limit parameter to forums.php and a variety of other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpx.org/project.php?action=view&project_id=1 - http://www.securityfocus.com/bid/10283 - ht
er: References: - http://www.phpx.org/project.php?action=view&project_id=1 - http://www.securityfocus.com/bid/10283 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16065 - http://www.securityfocus.com/archive/1/362230
CVE ID: CVE-2004-2364 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs that are automatically executed on behalf of the administrator, as demonstrated using (1) admin/page.php, (2) admin/news.php, (3) admin/user.php, (4) admin/images.php, (5) admin/page.php, or (6) admin/forums.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpx.org/project.php?action=view&project_id=1 - http://www.osvdb.org/5909 - http://securitytracker.com/id?
- http://www.phpx.org/project.php?action=view&project_id=1 - http://www.osvdb.org/5909 - http://securitytracker.com/id?1010061 - http://www.osvdb.org/5908 - http://www.osvdb.org/5911 - http://www.securityfocus.com/bid/10284 - http://www.osvdb.org/5910 - http://www.securityfocus.com/archive/1/362230 - http://secunia.com/advisories/11554 - http://www.osvdb.org/5907