Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-1703 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the signup action, which is executed when the administrator's browser loads the page with the img tag. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109122824523226&w=2 - http://www.securityfocus.com/bid/10836 - http://securitytracker.com/id?1010829 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16853
CVE ID: CVE-2004-1704 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: WpQuiz 2.60b1 through 2.60b8 allows remote attackers to gain privileges via a direct request to adminrestore.php in the extras directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/8321 - http://marc.info/?l=bugtraq&m=109122270013514&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16848
CVE ID: CVE-2004-1705 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109121546120575&w=2 - http://www.securityfocus.com/bid/10833 - http://www.nosystem.com.ar/advisories/advisory-04.txt - http://marc.info/?l=bugtraq&m=109146099404071&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16840 - http://secunia.com/advisories/12197 - http://securitytracker.com/id?1010809
CVE ID: CVE-2004-1706 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service (device crash) and possibly execute arbitrary code via an HTTP GET request with a long version string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16860 - http://marc.info/?l=bugtraq&m=109146350605751&w=2 - http://www.securityfocus.com/bid/10840 - http://secunia.com/advisories/12207
CVE ID: CVE-2004-1707 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16839 - http://marc.info/?l=bugtraq&m=109147677214087&w=2 - http://www.securityfoc
e.xforce.ibmcloud.com/vulnerabilities/16839 - http://marc.info/?l=bugtraq&m=109147677214087&w=2 - http://www.securityfocus.com/bid/10829
CVE ID: CVE-2004-1708 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webbsyte Chat 0.9.0 allows remote attackers to cause a denial of service (crash) via a large number of connections. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109156450320855&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16852 - http://www.securityfocus.com/bid/10842
CVE ID: CVE-2004-1709 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Datakey Rainbow iKey2032 USB token, when using the CIP client package, does not encrypt communications between the token and the driver, which could allow local users to obtain the PINs of other users. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109164096013467&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16887
CVE ID: CVE-2004-1710 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: page.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19713 - http://www.osvdb.org/8936 - http://marc.info/?l=bugtraq&m=109181771832634&w=2
CVE ID: CVE-2004-1711 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:36.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in post.php in Moodle before 1.3 allows remote attackers to inject arbitrary web script or HTML via the reply parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109182851216921&w=2 - http://www.securityfocus.com/bid/10884 - http://secunia.com/advisories/12262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16924
CVE ID: CVE-2004-1712 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TypePad allows remote attackers to inject arbitrary Javascript via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109189453302959&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19664
CVE ID: CVE-2004-1713 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:36.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in HP Process Resource Manager (PRM) C.02.01[.01] and earlier, as used by HP-UX Workload Manager (WLM), allows local users to corrupt data files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16928 - http://marc.info/?l=bugtraq&m=109215093809027&w=2 - http://www.securityfocus.com/bid/10907
CVE ID: CVE-2004-1714 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service (crash) or modify configuration, as demonstrated by modifying firewall.ini to contain a large firewall rule. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025112.html - http://www.securityfocus.com/bid/10915 - http://marc.info/?l=bug
.uk/pipermail/full-disclosure/2004-August/025112.html - http://www.securityfocus.com/bid/10915 - http://marc.info/?l=bugtraq&m=109223751031166&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16959
CVE ID: CVE-2004-1715 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via "..\\", "..\", and similar dot dot sequences in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10918 - http://marc.info/?l=bugtraq&m=109225567212978&w=2 - http://packetstormsecurity.nl/0408-exploits/clearswift.txt - http://marc.info/?l=bugtraq&m=109224211512029&w=2 - http://secunia.com/advisories/12273 - https://exchange.xforce.ibmcl
http://marc.info/?l=bugtraq&m=109224211512029&w=2 - http://secunia.com/advisories/12273 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16960
CVE ID: CVE-2004-1716 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PForum before 1.26 allows remote attackers to inject arbitrary web script or HTML via the (1) IRC Server or (2) AIM ID fields in the user profile. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17003 - http://marc.info/?l=bugtraq&m=109267937212298&w=2 - http://www.securityfocus.com/bid/10954 - http://www.osvdb.org/8985 - http://www.pscript.de/news/index.php - http://www.kb.cert.org/vuls/id/674542 - http://secunia.
tp://www.osvdb.org/8985 - http://www.pscript.de/news/index.php - http://www.kb.cert.org/vuls/id/674542 - http://secunia.com/advisories/12317/
CVE ID: CVE-2004-1717 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the psscan function in ps.c for gv (ghostview) allow remote attackers to execute arbitrary code via a Postscript file with a long (1) BoundingBox, (2) comment, (3) Orientation, (4) PageOrder, or (5) Pages value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17019 - http://marc.info/?l=bugtraq&m=109267677114331&w=2 - http://www.securityfocus.com/bid/10944
CVE ID: CVE-2004-1718 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZwOpenSection function in Integrity Protection Driver (IPD) 1.4 and earlier allows local users to cause a denial of service (crash) via an invalid pointer in the "oa" argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.ngsec.com/docs/advisories/NGSEC-2004-6.txt - http://secunia.com/advisories/12169 - http://marc.info/?l=bugtraq&m=109276749821133&w=2 - http://www.securityfocus.com/bid/10965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17010
CVE ID: CVE-2004-1719 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:36.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) category, (2) cserver, (3) ext, (4) global, (5) showgroups, (6) or showlite parameters to address.html, or the (7) spage or (8) autoresponder parameters to settings.html, the (9) folder parameter to readmail.html, or the (10) attachmentpage_text_error parameter to attachment.html, (11) folder, (12) ct, or (13) cv parameters to calendar.html, (14) an <img> tag, or (15) the s
meter to attachment.html, (11) folder, (12) ct, or (13) cv parameters to calendar.html, (14) an <img> tag, or (15) the subject of an e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.nl/0408-exploits/merak527.txt - http://www.securityfocus.com/bid/10966 - http://securitytracker.com/id?1010969 - http://marc.info/?l=bugtraq&m=109279057326044&w=2 - http://www.osvdb.org/9040 - http://www.osvdb.org/9041 - http://www.osvdb.org/9037 - http://www.osvdb.org/9042 - http://secunia.com/advisories/12269 - http://www.osvdb.org/9038 - http://www.osvdb.org/9039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17024
CVE ID: CVE-2004-1720 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sensitive information via an invalid HTTP request, which reveals the installation path. NOTE: it is unclear whether the calendar.html is an exposure, since the path is leaked in web logs that may only be available to the administrators, who would have access to the path through legitimate means. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.nl/0408-exploits/merak527.t
Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.nl/0408-exploits/merak527.txt - http://www.securityfocus.com/bid/10966 - http://securitytracker.com/id?1010969 - http://marc.info/?l=bugtraq&m=109279057326044&w=2 - http://secunia.com/advisories/12269 - http://www.osvdb.org/9043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17027
CVE ID: CVE-2004-1721 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.nl/0408-exploits/merak527.txt - http://www.osvdb.org/9045 - http://www.securityfocus.com/bid/10966 - http://securitytracker.com/id?1010969 - http://marc.info/?l=bugtraq&m=109279057326044&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17029 - http://secuni
/marc.info/?l=bugtraq&m=109279057326044&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17029 - http://secunia.com/advisories/12269
CVE ID: CVE-2004-1722 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL statements via the schedule parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.nl/0408-exploits/merak527.txt - http://www.securityfocus.com/bid/10966 - http://securitytracker.com/id?1010969 - http://marc.info/?l=bugtraq&m=109279057326044&w=2 - http://www.osvdb.org/9044 - http://secunia.com/advisories/12269 - https://exchange.xforce.ibmcloud.com/vulnerabilit
=2 - http://www.osvdb.org/9044 - http://secunia.com/advisories/12269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17022
CVE ID: CVE-2004-1723 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) updateuser.php and (2) forums_prune.php scripts in PHP-Fusion 4.00 allow remote attackers to obtain sensitive information via a direct HTTP request, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109285292901685&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17036
CVE ID: CVE-2004-1724 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups directory to world read/write/execute (777), which allows remote attackers to download or view database backups, which have easily guessable filenames and contain the administrator username and password. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12336 - http://www.securityfocus.com/bid/10974 - http://marc.info/?l=bugtraq&m=109285292901685&w=2 - https://exchange.x
/12336 - http://www.securityfocus.com/bid/10974 - http://marc.info/?l=bugtraq&m=109285292901685&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17037
CVE ID: CVE-2004-1725 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in xvbmp.c in XV allows remote attackers to execute arbitrary code via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17053 - http://www.securityfocus.com/bid/10985 - http://marc.info/?l=bugtraq&m=109302498125092&w=2
CVE ID: CVE-2004-1726 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in (1) xviris.c, (2) xvpcx.c, and (3) xvpm.c in XV allow remote attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17053 - http://www.securityfocus.com/bid/10985 - http://marc.info/?l=bugtraq&m=109302498125092&w=2
CVE ID: CVE-2004-1727 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number of connections from the same IP address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10983 - http://secunia.com/advisories/12346 - http://marc.info/?l=bugtraq&m=109309119502208&w=2 - http://www.gulftech.org/?node=research&article_id=00043-08202004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17064
CVE ID: CVE-2004-1728 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in British National Corpus SARA (sarad) allows remote attackers to execute arbitrary code by calling the client with a long string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17060 - http://secunia.com/advisories/12348 - http://www.securityfocus.com/bid/10984 - http://marc.info/?l=bugtraq&m=109308454122827&w=2
CVE ID: CVE-2004-1729 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Nihuo Web Log Analyzer 1.6 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10988 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17055 - http://marc.info/?l=bugtraq&m=109305923208449&w=2 - http://secunia.com/advisories/12347
CVE ID: CVE-2004-1730 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mantis bugtracker allows remote attackers to inject arbitrary web script or HTML via (1) the return parameter to login_page.php, (2) e-mail field in signup.php, (3) action parameter to login_select_proj_page.php, or (4) hide_status parameter to view_all_set.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17072 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17066 - http://secunia.com/advisories/12338 -
nerabilities/17072 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17066 - http://secunia.com/advisories/12338 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17070 - http://marc.info/?l=bugtraq&m=109312225727345&w=2 - http://www.securityfocus.com/bid/10994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17069
CVE ID: CVE-2004-1731 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and providing the same e-mail address. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17093 - http://www.securityfocus.com/bid/10995 - http://marc.info/?l=bugtraq&m=109312225727345&w=2
CVE ID: CVE-2004-1732 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17054 - http://www.securityfocus.com/bid/10996 - http://secunia.com/advisories/12340 - http://marc.info/?l=bugtraq&m=109314495007280&w=2
CVE ID: CVE-2004-1733 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered users to read arbitrary files via .. (dot dot) sequences in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10996 - http://secunia.com/advisories/12340 - http://marc.info/?l=bugtraq&m=109314495007280&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17058
CVE ID: CVE-2004-1734 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Mantis 0.19.0a allows remote attackers to execute arbitrary PHP code by modifying the (1) t_core_path parameter to bug_api.php or (2) t_core_dir parameter to relationship_api.php to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109313416727851&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17065 - http://www.securityfocus.com/bid/10993
CVE ID: CVE-2004-1735 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticated users to inject arbitrary web script or HTML via the description field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10992 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17057 - http://marc.info/?l=bugtraq&m=109312475207604&w=2 - http://secunia.com/advisories/12339
CVE ID: CVE-2004-1736 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and possibly other php files, which reveal the installation path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025376.html - http://secunia.com/advisories/12308 - http://marc.info/?l=bugtraq&m=109272483621038&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17014
CVE ID: CVE-2004-1737 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025376.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17011 - http://www.securityfocus.com/bid/10960 - http://secunia.com/advisories/12308 - http://marc.info/?l=bugtraq&m=109272483621038&w=2 - htt