Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-1505 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:23.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to read arbitrary files and possibly execute PHP code via a .. (dot dot) in the show parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13104 - http://www.securityfocus.com/bid/11627 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17983 - http://echo.or.id/adv/adv08-y3dips-2004.txt - http://marc.info/?l=bugtraq&m=110004150430309&w=2
CVE ID: CVE-2004-1506 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar allow remote attackers to inject arbitrary web script via (1) view_entry.php, (2) view_d.php, (3) usersel.php, (4) datesel.php, (5) trailer.php, or (6) styles.php, as demonstrated using img srg tags. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110011618724455&w=2 - http://www.securityfocus.com/bid/11651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18026 - http://secunia.com/advisories/13164
CVE ID: CVE-2004-1507 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in login.php in WebCalendar allows remote attackers to inject CRLF sequences via the return_path parameter and perform HTTP Response Splitting attacks to modify expected HTML content from the server. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110011618724455&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18027 - http://www.securityfocus.com/bid/11651 - http://secunia.com/advisories/13164
CVE ID: CVE-2004-1508 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: init.php in WebCalendar allows remote attackers to execute arbitrary local PHP scripts via the user_inc parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110011618724455&w=2 - http://www.securityfocus.com/bid/11651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18028 - http://secunia.com/advisories/13164
CVE ID: CVE-2004-1509 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: validate.php in WebCalendar allows remote attackers to gain sensitive information via an invalid encoded_login parameter, which reveals the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110011618724455&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18029 - http://www.securityfocus.com/bid/11651 - http://secunia.com/advisories/13164
CVE ID: CVE-2004-1510 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebCalendar allows remote attackers to gain privileges by modifying critical parameters to (1) view_entry.php or (2) upcoming.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110011618724455&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18030 - http://www.securityfocus.com/bid/11651 - http://secunia.com/advisories/13164
CVE ID: CVE-2004-1511 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hotfoon 4.0 does not notify users before opening links in web browsers, which could allow remote attackers to execute arbitrary code via a certain link sent in a chat window. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110014517703092&w=2 - http://secunia.com/advisories/13173 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18038
CVE ID: CVE-2004-1512 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via script code in the URL, which is not quoted in the resulting default error page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11652 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18033 - http://marc.info/?l=bugtraq&m=110012542615484&w=2 - http://www.soft3304.net/04WebServer/Security.html - http://www.security.org.sg
c.info/?l=bugtraq&m=110012542615484&w=2 - http://www.soft3304.net/04WebServer/Security.html - http://www.security.org.sg/vuln/04webserver142.html - http://marc.info/?l=bugtraq&m=110054395311823&w=2 - http://secunia.com/advisories/13159/
CVE ID: CVE-2004-1513 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: 04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the log file and spoof log entries. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11652 - http://marc.info/?l=bugtraq&m=110012542615484&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18034 - http://www.soft3304.net/04WebServer/Security.html - http://www.security.org.sg/vuln/04webserver142.html - http://marc.inf
ttp://www.soft3304.net/04WebServer/Security.html - http://www.security.org.sg/vuln/04webserver142.html - http://marc.info/?l=bugtraq&m=110054395311823&w=2 - http://secunia.com/advisories/13159/
CVE ID: CVE-2004-1514 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: 04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP request for an MS-DOS device name such as COM2. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18036 - http://www.securityfocus.com/bid/11652 - http://marc.info/?l=bugtraq&m=110012542615484&w=2 - http://www.soft3304.net/04WebServer/Security.html - http://www.security.org.sg/vuln/04webserver142.html - http://marc.info/?l=bugtraq&m=110054395311823&w=2
Security.html - http://www.security.org.sg/vuln/04webserver142.html - http://marc.info/?l=bugtraq&m=110054395311823&w=2 - http://secunia.com/advisories/13159/
CVE ID: CVE-2004-1515 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110019198507100&w=2
CVE ID: CVE-2004-1516 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the block_username parameter in the user module. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13172/ - http://www.securityfocus.com/bid/11673 - http://marc.info/?l=bugtraq&m=110022027420583&w=2 - http://phpwebsite.appstate.edu/index.php?module=announce&ANN_id=863&ANN_user_op=view - https://exchange
2027420583&w=2 - http://phpwebsite.appstate.edu/index.php?module=announce&ANN_id=863&ANN_user_op=view - https://exchange.xforce.ibmcloud.com/vulnerabilities/18046 - http://security.gentoo.org/glsa/glsa-200411-35.xml
CVE ID: CVE-2004-1517 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zone Labs IMsecure and IMsecure Pro before 1.5 allow remote attackers to bypass Active Link Filtering via an instant message containing a URL with hex encoded file extensions. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110020607924001&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18042 - http://www.securityfocus.com/bid/11662 - http://download.zonelabs.com/bin/free/securityAlert/16.html - http://secunia.com/advisories/13169
CVE ID: CVE-2004-1518 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arbitrary SQL command via the forum_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13174 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028609.html - http://marc.info/?l=bugtraq&m=110021385926870&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18045 - http://www.securityfocus.com/bid/11660
CVE ID: CVE-2004-1519 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute arbitrary SQL commands via (1) the bug_id parameter in a viewvotes operation or (2) the project parameter in an add operation. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110037408101974&w=2 - http://marc.info/?l=bugtraq&m=110037345428403&w=2 - http://marc.info/?l=bugtraq&m=110029315521568&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18053 - http://www.osvdb.org/displ
=bugtraq&m=110029315521568&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18053 - http://www.osvdb.org/displayvuln.php?osvdb_id=11718 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18079
CVE ID: CVE-2004-1520 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13200 - http://marc.info/?l=bugtraq&m=110037283803560&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18058 - http://www.securityfocus.com/bid/11675
CVE ID: CVE-2004-1521 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote attackers to read arbitrary files via spoofed "Converted" headers. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=ntbugtraq&m=110053102601655&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18064 - http://marc.info/?l=bugtraq&m=110037078519691&w=2 - http://packetstormsecurity.nl/0411-exploits/eudora62014.tx
s/18064 - http://marc.info/?l=bugtraq&m=110037078519691&w=2 - http://packetstormsecurity.nl/0411-exploits/eudora62014.txt
CVE ID: CVE-2004-1522 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Army Men RTS 1.0 allows remote attackers to cause a denial of service (application crash) via a nickname that contains format strings. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18065 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028757.html - http://marc.info/?l=bugtraq&m=110053709800174&w=2 - http://www.securityfocus.com/bid/11679 - http://secunia.com/advisories/13186
CVE ID: CVE-2004-1523 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the game console in Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (application crash) via format string specifiers in a message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13207 - http://marc.info/?l=bugtraq&m=110054260919742&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18083 - http://www.securityfocus.com/bid/11683
CVE ID: CVE-2004-1524 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (game interruption) via a malformed UDP packet sent to a game port, such as port 29200. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13207 - http://marc.info/?l=bugtraq&m=110054260919742&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18085 - http://www.securityfocus.com/bid/11683
CVE ID: CVE-2004-1525 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (application crash) via the status command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18086 - http://marc.info/?l=bugtraq&m=110054260919742&w=2 - http://www.securityfocus.com/bid/11683
CVE ID: CVE-2004-1526 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hired Team: Trial 2.0 and earlier and 2.200 does not limit how game players can kick other players off the server, including the administrator. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13207 - http://marc.info/?l=bugtraq&m=110054260919742&w=2
CVE ID: CVE-2004-1527 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0 SP1 does not properly handle certain character strings in the Path attribute, which can cause it to modify cookies in other domains when the attacker's domain name is within the target's domain name or when wildcard DNS is being used, which allows remote attackers to hijack web sessions. Additional Analyst Notes: - CVE Program Container: References: - http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/79_e.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18073 - http://secun
ess/sns/intelligence/SNSadvisory_e/79_e.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18073 - http://secunia.com/advisories/13208 - http://marc.info/?l=bugtraq&m=110053968530613&w=2 - http://www.securityfocus.com/bid/11680
CVE ID: CVE-2004-1528 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Event Calendar module 2.13 for PHP-Nuke allows remote attackers to gain sensitive information via an HTTP request to (1) config.php, (2) index.php, or (3) submit.php, which reveal the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18105 - http://marc.info/?l=bugtraq&m=110064626111756&w=2 - http://www.waraxe.us/index.php?modname=sa&id=38 - http://secunia.com/advisories/13213
CVE ID: CVE-2004-1529 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execute arbitrary web script via the (1) type, (2) day, (3) month, or (4) year parameters in a Preview operation, or (5) event comments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11693 - http://marc.info/?l=bugtraq&m=110064626111756&w=2 - http://www.waraxe.us/index.php?modname=sa&id=38 - http://secunia.com/advisories/13213 - https://exchange.xforce.ibmcloud.c
tp://www.waraxe.us/index.php?modname=sa&id=38 - http://secunia.com/advisories/13213 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18106 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18107
CVE ID: CVE-2004-1530 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the (1) eid or (2) cid parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18104 - http://marc.info/?l=bugtraq&m=110064626111756&w=2 - http://www.waraxe.us/index.php?modname=sa&id=38 - http://secunia.com/advisories/13213
CVE ID: CVE-2004-1531 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in post.php in Invision Power Board (IPB) 2.0.0 through 2.0.2 allows remote attackers to execute arbitrary SQL commands via the qpid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://forums.invisionpower.com/index.php?showtopic=154916 - http://marc.info/?l=bugtraq&m=111462421824202&w=2 - http://www.securityfocus.com/bid/11703 - http://marc.info/?l=bugtraq&m=111454805209191&w=2 - http://secunia.com/advisories/13245 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
ugtraq&m=111454805209191&w=2 - http://secunia.com/advisories/13245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18164 - http://marc.info/?l=bugtraq&m=110079592702417&w=2
CVE ID: CVE-2004-1532 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: AppServ 2.5.x and earlier installs a default username and password, which allows remote attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110079586328430&w=2 - http://www.securityfocus.com/bid/11704 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18163
CVE ID: CVE-2004-1533 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service (service crash) via a long (1) username or (2) password. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13248 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18161 - http://www.securityfocus.com/bid/11705 - http://www.digitalmapping.sk.ca/pop3srv/Update.asp - http://marc.info/?l=bugtraq&m=110081437508585&w=2
CVE ID: CVE-2004-1534 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to cause a denial of service (application instability or system hang) via certain JavaScript. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13244/ - http://marc.info/?l=bugtraq&m=110088808402495&w=2 - http://download.zonelabs.com/bin/free/securityAlert/18.html - http://www.securityfocus.com/bid/11706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18159
CVE ID: CVE-2004-1535 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to execute arbitrary PHP code by modifying the phpbb_root_path parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18151 - http://marc.info/?l=bugtraq&m=110075903308817&w=2 - http://marc.info/?l=bugtraq&m=110082153702843&w=2
CVE ID: CVE-2004-1536 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the ibProArcade module for Invision Power Board (IPB) 1.x and 2.x allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13260 - http://www.securityfocus.com/bid/11719 - http://securitytracker.com/id?1012292 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18180 - http://marc.info/?l=bugtraq&m=110098512318132&w=2
CVE ID: CVE-2004-1537 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in popup.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary web script via the img parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18204 - http://www.securityfocus.com/bid/11725 - http://marc.info/?l=bugtraq&m=110117116115493&w=2 - http://secunia.com/advisories/13262
CVE ID: CVE-2004-1538 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in include.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18205 - http://www.securityfocus.com/bid/11725 - http://marc.info/?l=bugtraq&m=110117116115493&w=2 - http://secunia.com/advisories/13262
CVE ID: CVE-2004-1539 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long value in a game server reply, which triggers a NULL dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18196 - http://secunia.com/advisories/13273 - http://marc.info/?l=bugtraq&m=110114770406920&w=2