Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-3305 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-07T23:10:07.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Nuked Klan 1.7 allow remote attackers to execute arbitrary SQL commands via the (1) forum_id or (2) thread_id parameter in the Forum file, (3) the link_id in the Links file, (4) the artid parameter in the Sections file, and (5) the dl_id parameter in the Download file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=113019342213796&w=2 - http://www.vupen.com/english/advisories/2005/2189 - http://marc.info/?l=bugtraq&m=113019206306710&w=2 -
9342213796&w=2 - http://www.vupen.com/english/advisories/2005/2189 - http://marc.info/?l=bugtraq&m=113019206306710&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22847 - http://www.osvdb.org/20339 - http://secunia.com/advisories/17304/ - http://www.nuked-klan.org/ - http://www.securityfocus.com/bid/15181 - http://marc.info/?l=bugtraq&m=113017972620427&w=2 - http://www.osvdb.org/20337 - http://www.osvdb.org/20338 - http://www.osvdb.org/20340
CVE ID: CVE-2005-3306 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-07T23:10:07.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php for FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the user parameter in a profile operation, a different vulnerability than CVE-2005-2814. NOTE: it is possible that this XSS is a resultant vulnerability of CVE-2005-3307. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=113018940229407&w=2 - http://www.osvdb.org/20246 - http://secunia.com/advisories/17291/
CVE ID: CVE-2005-3307 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-07T23:10:07.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php for FlatNuke 2.5.6 allows remote attackers to read arbitrary files via ".." sequences in the (1) user parameter in a profile operation or (2) quale parameter in a newtopic operation. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=113018940229407&w=2 - http://www.vupen.com/english/advisories/2005/2178 - http://www.securityfocus.com/bid/15172 - http://www.osvdb.org/20245 - http://secunia.com/advisories/17291/
CVE ID: CVE-2005-3308 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-07T23:10:08.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Zomplog 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) comment parameter in detail.php, (3) the username parameter in get.php, and (4) the search parameter in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15168 - http://www.osvdb.org/20255 - http://securitytracker.com/alerts/2005/Oct/1015088.html - http://secunia.com/advisories/17306/ - http://www.osvdb.org/20254 - htt
curitytracker.com/alerts/2005/Oct/1015088.html - http://secunia.com/advisories/17306/ - http://www.osvdb.org/20254 - http://www.osvdb.org/20253 - http://marc.info/?l=bugtraq&m=113019053831123&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22828
CVE ID: CVE-2005-3309 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-07T23:10:07.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Zomplog 3.4 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in detail.php and the catid parameter in (2) get.php and (3) index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20250 - http://www.osvdb.org/20252 - http://www.osvdb.org/20251 - http://securitytracker.com/alerts/2005/Oct/1015088.html - http://secunia.com/advisories/17306/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22827
CVE ID: CVE-2005-3310 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-07T23:10:08.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interpretation conflict in phpBB 2.0.17, with remote avatars and avatar uploading enabled, allows remote authenticated users to inject arbitrary web script or HTML via an HTML file with a GIF or JPEG file extension, which causes the HTML to be executed by a victim who views the file in Internet Explorer, which renders malformed image types as HTML, enabling cross-site scripting (XSS) attacks. NOTE: it could be argued that this vulnerability is due to a design flaw in Internet Explorer (CVE-2005-3312) and the proper fix should
e argued that this vulnerability is due to a design flaw in Internet Explorer (CVE-2005-3312) and the proper fix should be in that browser; if so, then this should not be treated as a vulnerability in phpBB. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15170 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22837 - http://www.debian.org/security/2005/dsa-925 - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0479.html - http://secunia.com/advisories/18098 - http://secunia.com/advisories/17295/ - http://marc.info/?l=bugtraq&m=113017003617987&w=2
CVE ID: CVE-2005-3311 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-07T23:10:07.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=113018286105811&w=2 - http://securitytracker.com/id?1015096 - http://secunia.com/advisories/17294 - http://www.securityfocus.com/bid/15167
CVE ID: CVE-2005-3312 State: PUBLISHED Published: 2005-10-26T04:00:00 Last Updated: 2024-08-07T23:10:08.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTML rendering engine in Microsoft Internet Explorer 6.0 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML in corrupted images and other files such as .GIF, JPG, and WAV, which is rendered as HTML when the user clicks on the link, even though the web server response and file extension indicate that it should be treated as a different file type. Additional Analyst Notes: - CVE Program Container: References: - http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=1746 - http://www.securiteam.com/windows
Program Container: References: - http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=1746 - http://www.securiteam.com/windowsntfocus/6F00B00EBY.html - http://www.computec.ch/download.php?view.683 - http://securityreason.com/securityalert/18 - http://marc.info/?l=bugtraq&m=113017003617987&w=2
CVE ID: CVE-2005-3313 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T23:10:08.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IRC protocol dissector in Ethereal 0.10.13 allows remote attackers to cause a denial of service (infinite loop). Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml - http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00005.html - http://www.novell.com/linux/security/advisories/2006_05_sr.html - http://secunia.com/advisories/17480 - http://secunia.com/advisories/18911 - http://secunia.com/advisories/19230 - http://www.redhat.com/support
sories/17480 - http://secunia.com/advisories/18911 - http://secunia.com/advisories/19230 - http://www.redhat.com/support/errata/RHSA-2006-0156.html - http://www.ethereal.com/appnotes/enpa-sa-00022.html - http://www.novell.com/linux/security/advisories/2005_25_sr.html - http://www.securityfocus.com/bid/15219 - http://secunia.com/advisories/19130 - http://securitytracker.com/id?1015414 - http://secunia.com/advisories/17370 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10616 - ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U - http://secunia.com/advisories/17377 - http://secunia.com/advisories/18426 - http://secunia.com/advisories/1
60201-01-U - http://secunia.com/advisories/17377 - http://secunia.com/advisories/18426 - http://secunia.com/advisories/18331
CVE ID: CVE-2005-3314 State: PUBLISHED Published: 2005-11-18T22:00:00 Last Updated: 2024-08-07T23:10:08.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via "long verb arguments." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015240 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23114 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972672.htm - http://www.securityfocus.com/bid/15491 - http://www.osvdb.org/20956 - http://secunia.com/advisories/17641 - http://support.novell.com/cgi-bin/search
/bid/15491 - http://www.osvdb.org/20956 - http://secunia.com/advisories/17641 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972673.htm - http://www.vupen.com/english/advisories/2005/2494 - http://www.zerodayinitiative.com/advisories/ZDI-05-003.html - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972665.htm
CVE ID: CVE-2005-3315 State: PUBLISHED Published: 2005-10-30T20:00:00 Last Updated: 2024-08-07T23:10:07.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (2) SearchText, (3) StatusFilter, and (4) computerFilter parameters to reports/default.asp. Additional Analyst Notes: - CVE Program Container: References: - http://support.novell.com/cgi-bin/search/searchtid.cgi?10099318.htm - http://securityreason.com/securityalert/124 - http://securitytracker.com/id?1015116 -
arch/searchtid.cgi?10099318.htm - http://securityreason.com/securityalert/124 - http://securitytracker.com/id?1015116 - http://www.osvdb.org/20363 - http://www.kb.cert.org/vuls/id/536300 - http://secunia.com/advisories/17358 - http://www.osvdb.org/20362 - http://www.securityfocus.com/archive/1/414880 - http://www.securityfocus.com/bid/15220 - http://www.vupen.com/english/advisories/2005/2238 - http://cirt.dk/advisories/cirt-39-advisory.pdf
CVE ID: CVE-2005-3316 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:07.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation of ON Symantec Discovery 4.5.x and Symantec Discovery 6.0 creates the (1) DiscoveryWeb and (2) DiscoveryRO database accounts with null passwords, which could allow attackers to gain privileges or prevent Discovery from running by setting another password. Additional Analyst Notes: - CVE Program Container: References: - http://securityresponse.symantec.com/avcenter/security/Content/2005.10.24.html - http://securitytracker.com/id?1015097 - http://securityreason.com/securityalert/112 - http://www.securityfocus.co
html - http://securitytracker.com/id?1015097 - http://securityreason.com/securityalert/112 - http://www.securityfocus.com/bid/15188 - http://secunia.com/advisories/17302
CVE ID: CVE-2005-3317 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:07.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allow remote attackers to execute arbitrary code via (1) a ZIP archive that contains a file with a long filename, which is not properly handled by (a) zipgenius.exe, (b) zg.exe, (c) zgtips.dll, and (d) contmenu.dll; (2) a long original name in a (a) UUE, (b) XXE, or (c) MIM file, which is not properly handled by zipgenius.exe; or (3) an ACE archive with a file with a long filename, which is not properly handled by
perly handled by zipgenius.exe; or (3) an ACE archive with a file with a long filename, which is not properly handled by unacev2.dll. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20158 - http://www.securityfocus.com/bid/15161 - http://forum.zipgenius.it/index.php?showtopic=684 - http://secunia.com/advisories/17061 - http://secunia.com/secunia_research/2005-54/advisory - http://securitytracker.com/id?1015090 - http://securityreason.com/securityalert/103 - http://www.osvdb.org/20159 - http://www.securityfocus.com/archive/1/414083 - http://www.osvdb.org/20157
CVE ID: CVE-2005-3318 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:07.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the _chm_decompress_block function in CHM lib (chmlib) before 0.37, as used in products such as KchmViewer, allows attackers to execute arbitrary code, a different vulnerability than CVE-2005-2930. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0536.html - http://secunia.com/advisories/17480 - http://secunia.com/advisories/17775 - http://www.vupen.com/english/advisories/2005/2207 - http://www.novell.com/linux/security/advisories/
/advisories/17775 - http://www.vupen.com/english/advisories/2005/2207 - http://www.novell.com/linux/security/advisories/2005_25_sr.html - http://www.securityfocus.com/bid/15211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22885 - http://www.osvdb.org/20335 - http://secunia.com/advisories/17325 - http://secunia.com/advisories/17776 - http://www.sven-tantau.de/public_files/chmlib/chmlib_20051126.txt - http://www.gentoo.org/security/en/glsa/glsa-200511-23.xml - http://morte.jedrea.com/~jedwin/projects/chmlib/
CVE ID: CVE-2005-3319 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:08.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 final and 4.4 before 4.4.1 final allows attackers to cause a denial of service (segmentation fault) via the session.save_path option in a .htaccess file or VirtualHost. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=113019286208204&w=2 - http://secunia.com/advisories/22691 - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0491.html - http://www.mandriva.com/security/advi
/22691 - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0491.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:213 - http://secunia.com/advisories/18198 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 - http://securityreason.com/securityalert/525 - http://secunia.com/advisories/19064 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22844 - http://bugs.gentoo.org/show_bug.cgi?id=107602 - http://www.osvdb.org/20491 - http://www.securityfocus.com/bid/16907 - http://www.vupen.com/english/advisories/2006/0791 - http://www.vupen.com/english/advisories/2006/4320 - http://lists.apple.c
://www.vupen.com/english/advisories/2006/0791 - http://www.vupen.com/english/advisories/2006/4320 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html - http://www.securityfocus.com/bid/15177 - http://www.us-cert.gov/cas/techalerts/TA06-062A.html - http://secunia.com/advisories/17510 - http://secunia.com/advisories/17557 - http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml - https://www.ubuntu.com/usn/usn-232-1/ - http://docs.info.apple.com/article.html?artnum=303382
CVE ID: CVE-2005-3320 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:08.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SiteTurn Domain Manager Pro allows remote attackers to inject arbitrary web script or HTML via the err parameter in the panel script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/414396 - http://www.kapda.ir/advisory-96.html - http://www.securityfocus.com/bid/15186
CVE ID: CVE-2005-3321 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:07.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by creating a hardlink to a file from a world-writable directory, which can cause the link count to drop to 1 when the file is deleted or replaced, which is then modified by chkstat to use weaker permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20263 - http://secunia.com/advisories/17290/ - http://www.novell.com/linux/security/advisories/2005_62_permissions.html - http://www.securityfocus.c
dvisories/17290/ - http://www.novell.com/linux/security/advisories/2005_62_permissions.html - http://www.securityfocus.com/bid/15182 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22853
CVE ID: CVE-2005-3322 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:08.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of service (crash) via HTTPs (SSL). Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_28_sr.html - http://www.novell.com/linux/security/advisories/2005_24_sr.html - http://www.securityfocus.com/bid/15165
CVE ID: CVE-2005-3323 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:08.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17676 - http://www.securityfocus.com/bid/15082 - http://www.zope.org/Products/Zope/Hotfix_2005-10-09/security_alert - http://www.debian.org/security/2005/dsa-910 - https://usn.ubuntu.com/229-1/ - http://secunia.com/advisories/17309 - http://secunia.com/advisories/171
y/2005/dsa-910 - https://usn.ubuntu.com/229-1/ - http://secunia.com/advisories/17309 - http://secunia.com/advisories/17173 - http://www.gentoo.org/security/en/glsa/glsa-200510-20.xml - http://www.novell.com/linux/security/advisories/2005_27_sr.html
CVE ID: CVE-2005-3324 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:08.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in chat.php in MWChat 6.8 allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22845 - http://appindex.net/products/changelog/?product=mwchat&version=6.9 - http://www.securityfocus.com/bid/15198 - http://www.vupen.com/english/advisories/2005/2180 - http://www.hackerscenter.com/Archive/view.asp?id=19537 - http://www.osvdb.org/20266 - http://securitytra
ies/2005/2180 - http://www.hackerscenter.com/Archive/view.asp?id=19537 - http://www.osvdb.org/20266 - http://securitytracker.com/id?1015094 - http://rgod.altervista.org/mwchat.html - http://secunia.com/advisories/17303
CVE ID: CVE-2005-3325 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:07.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 and (2) base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.2, and unspecified other console scripts in these products, allow remote attackers to execute arbitrary SQL commands via the sig[1] parameter and possibly other parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17314 - http://www.osvdb.org/20836 - http://www.vupen.com/english/a
ntainer: References: - http://secunia.com/advisories/17314 - http://www.osvdb.org/20836 - http://www.vupen.com/english/advisories/2005/2188 - http://www.securityfocus.com/bid/15199 - http://secunia.com/advisories/17523 - http://secunia.com/advisories/17558 - http://www.debian.org/security/2005/dsa-893 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336788 - http://secunia.com/advisories/17552 - http://www.osvdb.org/20837
CVE ID: CVE-2005-3326 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:07.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in usercp.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the awayday parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/414672 - http://community.mybboard.net/showthread.php?tid=4507&pid=27223#pid27223 - http://www.osvdb.org/20700 - http://www.securityfocus.com/bid/15204
CVE ID: CVE-2005-3327 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:07.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Network Appliance Data ONTAP 7.0 and earlier allows iSCSI Initiators to bypass iSCSI authentication via a modified client that skips the Security (Start) mode, as required by the Login Negotiation protocol, and uses Operational mode without proving identity. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015103 - http://www.matasano.com/advisories/netapp-iSCSI.txt - http://www.vupen.com/english/advisories/2005/2193 - http://marc.info/?l=bugtraq&m=113028385702680&w=2 - http://www
txt - http://www.vupen.com/english/advisories/2005/2193 - http://marc.info/?l=bugtraq&m=113028385702680&w=2 - http://www.securityfocus.com/bid/15197 - http://secunia.com/advisories/17321
CVE ID: CVE-2005-3328 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:08.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in common.php in PunBB 1.1.2 through 1.1.5 allows remote attackers to execute arbitrary code via the pun_root parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=113017630505223&w=2 - http://www.securityfocus.com/bid/15175 - http://securityreason.com/securityalert/107
CVE ID: CVE-2005-3329 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:08.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in RSA Authentication Agent for Web 5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the image parameter in a GetPic operation. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17331 - http://securityreason.com/securityalert/116 - http://marc.info/?l=bugtraq&m=113028928630700&w=2 - http://marc.info/?l=full-disclosure&m=113027324906876&w=2 - http://securitytracker.com/id?1015105 - http://www.securityfocus.com
arc.info/?l=full-disclosure&m=113027324906876&w=2 - http://securitytracker.com/id?1015105 - http://www.securityfocus.com/bid/15206 - http://www.vupen.com/english/advisories/2005/2203 - http://marc.info/?l=full-disclosure&m=113027017101376&w=2