Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- http://secunia.com/advisories/17953 - http://www.vupen.com/english/advisories/2005/2810 - http://www.perlcal.com/calendar/docs/bugs.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/23534
CVE ID: CVE-2005-4163 State: PUBLISHED Published: 2005-12-11T11:00:00Z Last Updated: 2024-09-16T17:15:31.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in captcha.php in Captcha PHP 0.9 allows remote attackers to read arbitrary files via the _tcf parameter. Additional Analyst Notes: - CVE Program Container: References: - http://freshmeat.net/projects/captchaphp/?branch_id=57290&release_id=206985
CVE ID: CVE-2005-4164 State: PUBLISHED Published: 2005-12-11T11:00:00 Last Updated: 2024-08-07T23:38:51.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view.php in PHP-addressbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23506 - http://www.osvdb.org/21456 - http://secunia.com/advisories/17885 - http://www.vupen.com/english/advisories/2005/2768
CVE ID: CVE-2005-4165 State: PUBLISHED Published: 2005-12-11T21:00:00 Last Updated: 2024-08-07T23:38:52.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ASP-DEV ASP Resources Forum allow remote attackers to execute arbitrary SQL commands via the (1) forum_id parameter to forum.asp, (2) unspecified parameters to register.asp, and (3) the "Search For" field in search.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21708 - http://securitytracker.com/id?1015316 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23511 - http://www.osvdb.org/21706 - http://www.securityfocus.com/bid/15858 - http:
.xforce.ibmcloud.com/vulnerabilities/23511 - http://www.osvdb.org/21706 - http://www.securityfocus.com/bid/15858 - http://www.osvdb.org/21707
CVE ID: CVE-2005-4166 State: PUBLISHED Published: 2005-12-11T21:00:00 Last Updated: 2024-08-07T23:38:51.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in password.asp in DUWare DUportal Pro 3.4.3 allows remote attackers to inject arbitrary web script or HTML via the result parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2769 - http://www.osvdb.org/21485 - http://secunia.com/advisories/17898 - http://www.securityfocus.com/bid/15731
CVE ID: CVE-2005-4167 State: PUBLISHED Published: 2005-12-11T21:00:00Z Last Updated: 2024-09-16T16:14:17.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in eFiction 1.0 and 1.1 allows remote attackers to inject arbitrary web script or HTML via the let parameter in a viewlist action to titles.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555 - http://www.securityfocus.com/bid/15568 - http://rgod.altervista.org/efiction2_xpl.html - http://secunia.com/advisories/17777 - http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html
CVE ID: CVE-2005-4168 State: PUBLISHED Published: 2005-12-11T21:00:00 Last Updated: 2024-08-07T23:38:51.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in eFiction 1.0, 1.1, and 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the let parameter in a viewlist action to titles.php and (2) the username. Additional Analyst Notes: - CVE Program Container: References: - http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555 - http://www.osvdb.org/21120 - http://www.securityfocus.com/bid/15568 - http://www.osvdb.org/21123 - http://rgod.altervista.org/efiction2_xpl.html - http://secunia.com/advisories/17777 - http
http://www.osvdb.org/21123 - http://rgod.altervista.org/efiction2_xpl.html - http://secunia.com/advisories/17777 - http://securitytracker.com/id?1015273 - http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html
CVE ID: CVE-2005-4169 State: PUBLISHED Published: 2005-12-11T21:00:00 Last Updated: 2024-08-07T23:38:51.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) let parameter in a viewlist action to authors.php and (2) sid parameter to viewstory.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23373 - http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555 - http://www.securityfocus.com/bid/15568 - http://www.vupen.com/english/advisories/2005/2606 - http://rgod.altervista.org/efi
p://www.securityfocus.com/bid/15568 - http://www.vupen.com/english/advisories/2005/2606 - http://rgod.altervista.org/efiction2_xpl.html - http://secunia.com/advisories/17777 - http://securitytracker.com/id?1015273 - http://www.osvdb.org/21121 - http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html - http://www.osvdb.org/21119
CVE ID: CVE-2005-4170 State: PUBLISHED Published: 2005-12-11T21:00:00 Last Updated: 2024-08-07T23:38:51.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands via the uid parameter to viewuser.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23373 - http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555 - http://www.osvdb.org/21122 - http://www.securityfocus.com/bid/15568 - http://www.vupen.com/english/advisories/2005/2606 - http://rgod.altervista.org/efiction2_xpl.html - http://secunia.com/advisor
/www.vupen.com/english/advisories/2005/2606 - http://rgod.altervista.org/efiction2_xpl.html - http://secunia.com/advisories/17777 - http://securitytracker.com/id?1015273 - http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html
CVE ID: CVE-2005-4171 State: PUBLISHED Published: 2005-12-11T21:00:00Z Last Updated: 2024-09-17T02:46:48.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Upload new image" command in the "Manage Images" eFiction 1.1, when members are allowed to upload images, allows remote attackers to execute arbitrary PHP code by uploading a filename with a .php extension that contains a GIF header, which passes the image validity check but executes any PHP code within the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555 - http://www.securityfocus.com/bid/15568 - http://rgod.altervista.org/efiction2
owergirl.com/forums/viewtopic.php?t=1555 - http://www.securityfocus.com/bid/15568 - http://rgod.altervista.org/efiction2_xpl.html - http://secunia.com/advisories/17777 - http://securitytracker.com/id?1015273 - http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html - http://www.osvdb.org/21124
CVE ID: CVE-2005-4172 State: PUBLISHED Published: 2005-12-11T21:00:00Z Last Updated: 2024-09-17T04:24:34.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information via a direct request to storyblock.php without arguments, which leaks the full pathname in the resulting PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555 - http://www.osvdb.org/21125 - http://www.securityfocus.com/bid/15568 - http://rgod.altervista.org/efiction2_xpl.html - http://secunia.com/advisories/17777 - http://securitytracker.com/id?1015
http://rgod.altervista.org/efiction2_xpl.html - http://secunia.com/advisories/17777 - http://securitytracker.com/id?1015273 - http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html
CVE ID: CVE-2005-4173 State: PUBLISHED Published: 2005-12-11T21:00:00Z Last Updated: 2024-09-17T02:32:26.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing phpinfo.php, which executes the PHP phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555 - http://www.securityfocus.com/bid/15568 - http://rgod.altervista.org/efiction2_xpl.html - http://secunia.com/advisories/17777 - http://securitytracker.com/id?1015273 - http://www.osvdb.org/21126 - http://archives.neohapsis.com/archives/bugtraq/2005
http://securitytracker.com/id?1015273 - http://www.osvdb.org/21126 - http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html
CVE ID: CVE-2005-4174 State: PUBLISHED Published: 2005-12-11T21:00:00 Last Updated: 2024-08-07T23:38:51.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessing (1) install.php or (2) upgrade.php. NOTE: it is unclear whether this is a vulnerability in eFiction itself or the result of incorrect system administration practices, e.g. by not removing utility scripts once they have been used. Additional Analyst Notes: - CVE Program Container: References: - http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555 - http://www.securityfocus.
Container: References: - http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555 - http://www.securityfocus.com/bid/15568 - http://rgod.altervista.org/efiction2_xpl.html - http://secunia.com/advisories/17777 - http://securitytracker.com/id?1015273 - http://securityreason.com/securityalert/206 - http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html
CVE ID: CVE-2005-4175 State: PUBLISHED Published: 2005-12-11T21:00:00 Last Updated: 2024-08-07T23:38:51.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insyde BIOS V190 does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.ivizsecurity.com/preboot-patch.html - http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf - http://www.securityfocus.com/bid/15751 - http://www.securityfocus.com/archive/1/419610/100/0/threaded - http://www.kb.cert.org/vuls/id/847537 - ht
om/bid/15751 - http://www.securityfocus.com/archive/1/419610/100/0/threaded - http://www.kb.cert.org/vuls/id/847537 - http://www.pulltheplug.org/users/endrazine/Bios.Information.Leakage.txt
CVE ID: CVE-2005-4176 State: PUBLISHED Published: 2005-12-11T21:00:00 Last Updated: 2024-08-07T23:38:51.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.ivizsecurity.com/preboot-patch.html - http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf - http://www.securityfocus.com/bid/15751 - http://www.securityfocus.com/archive/1/419610/100/0/threaded - http://www.kb.cert.org/vuls/id/84
tyfocus.com/bid/15751 - http://www.securityfocus.com/archive/1/419610/100/0/threaded - http://www.kb.cert.org/vuls/id/847537 - http://www.pulltheplug.org/users/endrazine/Bios.Information.Leakage.txt
CVE ID: CVE-2005-4177 State: PUBLISHED Published: 2005-12-12T01:00:00 Last Updated: 2024-08-07T23:38:51.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in book.cfm in Magic Book Personal and Professional 2.0 allows remote attackers to inject arbitrary web script or HTML via the StartRow parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2832 - http://secunia.com/advisories/17982 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23521 - http://pridels0.blogspot.com/2005/12/magic-book-v20-professional-vuln.html - http://www.osvdb.org/21529 - http://www.securityfoc
ridels0.blogspot.com/2005/12/magic-book-v20-professional-vuln.html - http://www.osvdb.org/21529 - http://www.securityfocus.com/bid/15805
CVE ID: CVE-2005-4178 State: PUBLISHED Published: 2005-12-12T21:00:00 Last Updated: 2024-08-07T23:38:51.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18142 - http://www.securityfocus.com/bid/15923/ - http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2005q4/000312.html - http://secunia.com/advisories/18109 - http://www.gentoo.org/s
.ucc.gu.uwa.edu.au/pipermail/dropbear/2005q4/000312.html - http://secunia.com/advisories/18109 - http://www.gentoo.org/security/en/glsa/glsa-200512-13.xml - http://www.debian.org/security/2005/dsa-923 - http://secunia.com/advisories/18108 - http://matt.ucc.asn.au/dropbear/dropbear.html - http://www.vupen.com/english/advisories/2005/2962
CVE ID: CVE-2005-4189 State: PUBLISHED Published: 2005-12-13T11:00:00 Last Updated: 2024-08-07T23:38:51.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith H3 before 2.0.6 allow remote authenticated users to inject arbitrary web script or HTML via (1) the Calendar name field when creating calendars, (2) event title field when deleting events, the (3) Category and (4) Location search fields, and the (5) attendees email address fields when editing event attendees, and possibly other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18827 - http://www.osvdb.or
ditional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18827 - http://www.osvdb.org/21609 - http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0459.html - http://www.osvdb.org/21608 - http://secunia.com/advisories/17971 - http://www.securityfocus.com/bid/15808 - http://www.vupen.com/english/advisories/2005/2834 - http://www.debian.org/security/2006/dsa-970 - http://www.osvdb.org/21611 - http://www.osvdb.org/21610 - http://lists.horde.org/archives/announce/2005/000234.html - http://www.sec-consult.com/245.html
CVE ID: CVE-2005-4190 State: PUBLISHED Published: 2005-12-13T11:00:00 Last Updated: 2024-08-07T23:38:51.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework before 3.0.8 allow remote authenticated users to inject arbitrary web script or HTML via multiple vectors, as demonstrated by (1) the identity field, (2) Category and (3) Label search fields, (4) the Mobile Phone field, and (5) Date and (6) Time fields when importing CSV files, as exploited through modules such as (a) Turba Address Book, (b) Kronolith, (c) Mnemo, and (d) Nag. Additional Analyst Notes: - CVE Program Container: References: - http:
ress Book, (b) Kronolith, (c) Mnemo, and (d) Nag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15810 - http://www.securityfocus.com/bid/15806 - http://www.securityfocus.com/bid/15808 - http://www.vupen.com/english/advisories/2005/2835 - http://www.securityfocus.com/bid/15804 - http://www.securityfocus.com/bid/15803 - http://secunia.com/advisories/19619 - http://www.debian.org/security/2006/dsa-1033 - http://www.novell.com/linux/security/advisories/2006_16_sr.html - http://www.securityfocus.com/bid/15802 - http://secunia.com/advisories/17970 - http://secunia.com/advisories/20960 - http://www.sec-consult.com/245.html - http://lists.horde.org
om/advisories/17970 - http://secunia.com/advisories/20960 - http://www.sec-consult.com/245.html - http://lists.horde.org/archives/announce/2005/000238.html - http://secunia.com/advisories/19897 - http://www.novell.com/linux/security/advisories/2006_04_28.html
CVE ID: CVE-2005-4191 State: PUBLISHED Published: 2005-12-13T11:00:00 Last Updated: 2024-08-07T23:38:51.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in templates/tasklists/tasklists.inc in Horde Nag Task List Manager H3 before 2.0.4 allow remote authenticated users to inject arbitrary web script or HTML via (1) the tasklist's name or (2) description, when creating a new tasklist. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15804 - http://www.vupen.com/english/advisories/2005/2836 - http://secunia.com/advisories/17969 - http://cvs.horde.org/diff.php/nag/templates/taskli
/english/advisories/2005/2836 - http://secunia.com/advisories/17969 - http://cvs.horde.org/diff.php/nag/templates/tasklists/tasklists.inc?r1=1.10&r2=1.11&ty=h - http://lists.horde.org/archives/announce/2005/000236.html - http://www.sec-consult.com/245.html
CVE ID: CVE-2005-4192 State: PUBLISHED Published: 2005-12-13T11:00:00 Last Updated: 2024-08-07T23:38:51.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in templates/notepads/notepads.inc in Horde Mnemo Note Manager H3 before 2.0.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) the notepad's name or (2) description, when creating a new notepad. Additional Analyst Notes: - CVE Program Container: References: - http://lists.horde.org/archives/announce/2005/000237.html - http://secunia.com/advisories/17964 - http://www.securityfocus.com/bid/15803 - http://www.vupen.com/english/advisories/2005/2833
ecunia.com/advisories/17964 - http://www.securityfocus.com/bid/15803 - http://www.vupen.com/english/advisories/2005/2833 - http://www.sec-consult.com/245.html - http://cvs.horde.org/diff.php/mnemo/templates/notepads/notepads.inc?r1=1.9&r2=1.10&ty=h
CVE ID: CVE-2005-4193 State: PUBLISHED Published: 2005-12-13T11:00:00 Last Updated: 2024-08-07T23:38:51.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in UseBB before 0.7 allows remote attackers to inject arbitrary web script or HTML via the $_SERVER['PHP_SELF'] variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2843 - http://www.securityfocus.com/bid/15817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23544 - http://secunia.com/advisories/17958 - http://sourceforge.net/project/shownotes.php?release_id=377496&group_id=93103
CVE ID: CVE-2005-4194 State: PUBLISHED Published: 2005-12-13T11:00:00 Last Updated: 2024-08-07T23:38:51.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MediaServerList.exe in Sights 'n Sounds Streaming Media Server 2.0.3.a allows remote attackers to cause a denial of service (application crash) via a long query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2841 - http://www.ipomonis.com/advisories/sws.txt - http://www.securityfocus.com/bid/15809 - http://secunia.com/advisories/17998
CVE ID: CVE-2005-4195 State: PUBLISHED Published: 2005-12-13T11:00:00 Last Updated: 2024-08-07T23:38:51.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the ParentId parameter in SPT--BrowseResources.php, (2) ResourceId parameter in SPT--FullRecord.php, (3) ResourceOffset parameter in SPT--Home.php, and (4) F_UserName and (5) F_Password in SPT--UserLogin.php. NOTE: it was later reported that vector 1 is also present in 1.4.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21627 - http://ww
resent in 1.4.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21627 - http://www.securityfocus.com/archive/1/491611/100/0/threaded - http://www.vupen.com/english/advisories/2005/2844 - http://www.securityfocus.com/bid/15818 - http://www.osvdb.org/21628 - http://www.securityfocus.com/bid/29034 - http://secunia.com/advisories/17979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42169 - http://www.osvdb.org/21625 - http://www.x-illusion.com/rs/Scout%20Portal%20Toolkit.txt - https://www.exploit-db.com/exploits/5540 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23547 - http://www.osvdb.org/21626
CVE ID: CVE-2005-4196 State: PUBLISHED Published: 2005-12-13T11:00:00 Last Updated: 2024-08-07T23:38:51.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the ss parameter in SPT--QuickSearch.php; (2) ParentId parameter in SPT--BrowseResources.php; (3) the ResourceId parameter in SPT--FullRecord.php; (4) ResourceOffset parameter in SPT--Home.php, (5) F_SearchString parameter in SPT--QuickSearch.php; (6) F_UserName and (7) F_Password parameters in SPT--UserLogin.php; (8) F_SearchCat1, (9) F_TextField1, (10) F_Sea
.php; (6) F_UserName and (7) F_Password parameters in SPT--UserLogin.php; (8) F_SearchCat1, (9) F_TextField1, (10) F_SearchCat2, (11) F_TextField2, (12) F_SearchCat3, (13) F_TextField3, (14) F_SearchCat4, (15) F_TextField4, (16) ResourceType, (17) Language, (18) Audience, (19) Format parameters in SPT--AdvancedSearch.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21635 - http://www.vupen.com/english/advisories/2005/2844 - http://www.securityfocus.com/bid/15818 - http://www.osvdb.org/21633 - http://secunia.com/advisories/17979 - http://www.osvdb.org/21634 - http://www.x-illusion.com/rs/Scout%20Portal%20Toolkit.txt - http://www.osvdb.org/21632 - http
tp://www.osvdb.org/21634 - http://www.x-illusion.com/rs/Scout%20Portal%20Toolkit.txt - http://www.osvdb.org/21632 - http://www.osvdb.org/21636 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23545 - http://www.osvdb.org/21631 - http://www.osvdb.org/21630
CVE ID: CVE-2005-4197 State: PUBLISHED Published: 2005-12-13T11:00:00 Last Updated: 2024-08-07T23:38:51.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a parameter, which is executed with extra privileges in a cryptographically signed Java Applet. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015341 - http://www.sec-consult.com/247.html - http://www.securityfocus.com/archive/1/419263/100/0/threaded - http://www.vupen.com/english/advisories/2005/2845 - http://secunia.com/advisories/17974 - http://www.securityfocus.c
d - http://www.vupen.com/english/advisories/2005/2845 - http://secunia.com/advisories/17974 - http://www.securityfocus.com/bid/15798
CVE ID: CVE-2005-4198 State: PUBLISHED Published: 2005-12-13T11:00:00 Last Updated: 2024-08-07T23:38:51.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2838 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23548 - http://www.osvdb.org/21623 - http://www.securityfocus.com/bid/15801 - http://secunia.com/advisories/17987 - http