Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-4060 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:48.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.asp in rwAuction Pro 4.0 and 5.0 allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17905 - http://pridels0.blogspot.com/2005/12/rwauction-pro-v40-xss-vuln.html - http://www.osvdb.org/21475 - http://www.vupen.com/english/advisories/2005/2758 - http://www.attrition.org/pipermail/vim/2006-April/000713.html - http://www.securityfocus.com/bid/1574
sories/2005/2758 - http://www.attrition.org/pipermail/vim/2006-April/000713.html - http://www.securityfocus.com/bid/15740 - http://pridels-team.blogspot.com/2007/06/rwauction-pro-xss-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/23466
CVE ID: CVE-2005-4061 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:48.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PASearch.asp in XcPhotoAlbum 1.x allows remote attackers to inject arbitrary web script or HTML via the search parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/xcphotoalbum-v1x-xss-vuln.html - http://www.vupen.com/english/advisories/2005/2759 - http://secunia.com/advisories/17904 - http://www.securityfocus.com/bid/15739 - http://www.osvdb.org/21477
CVE ID: CVE-2005-4062 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:48.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CPSearch.asp in XcClassified 3.x allows remote attackers to inject arbitrary web script or HTML via the search parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15738 - http://www.vupen.com/english/advisories/2005/2760 - http://www.osvdb.org/21470 - http://secunia.com/advisories/17903 - http://pridels0.blogspot.com/2005/12/xcclassified-v3x-xss-vuln.html
CVE ID: CVE-2005-4063 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:49.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in NetAuctionHelp 3.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) L, (2) sort, (3) category, (4) categoryname parameters to search.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2761 - http://www.osvdb.org/21474 - http://secunia.com/advisories/17902 - http://pridels0.blogspot.com/2005/12/netauctionhelp-v30-xss-vuln.html - http://www.securityfocus.com/bid/15737
CVE ID: CVE-2005-4064 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:48.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) faqid parameter to faqDspItem.asp and (2) catcode parameter to faqDsp.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17900 - http://www.osvdb.org/21472 - http://www.vupen.com/english/advisories/2005/2763 - http://pridels0.blogspot.com/2005/12/faq-sql-inj-vuln.html - http://www.securityfocus.com/bid/15741 - http://www.osvdb.org/21473
CVE ID: CVE-2005-4065 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:48.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18555 - http://www.osvdb.org/21459 - http://lists.edgewall.com/archive/trac/2005-December/005777.html - http://securityreason.com/securityalert/222 - http://secunia.com/advisories/17894 - http://projects.edgewall.com/trac/wiki/ChangeLog - http://www.vupen.com/english/advisories/
cunia.com/advisories/17894 - http://projects.edgewall.com/trac/wiki/ChangeLog - http://www.vupen.com/english/advisories/2005/2766 - http://www.debian.org/security/2006/dsa-951 - http://www.securityfocus.com/bid/15720
CVE ID: CVE-2005-4066 State: PUBLISHED Published: 2005-12-07T11:00:00 Last Updated: 2024-08-07T23:31:48.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCX_FTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2780 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23497 - http://www.networksecurity.fi/advisories/total-commander.html - http://securitytracker.com/id?1015311
CVE ID: CVE-2005-4067 State: REJECTED Published: 2005-12-07T23:00:00 Last Updated: 2005-12-12T10:00:00 Description: No description available.
CVE ID: CVE-2005-4068 State: PUBLISHED Published: 2005-12-08T01:00:00 Last Updated: 2024-08-07T23:31:49.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified "absolute path vulnerability" in umountall in IBM AIX 5.1 through 5.3 allows local users to cause unknown impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=isg1IY75294 - http://www.vupen.com/english/advisories/2005/2784 - http://securitytracker.com/id?1015321 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY79485 - http://www.securityfocus.com/bid/15758 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY75283 - http://secu
Y79485 - http://www.securityfocus.com/bid/15758 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY75283 - http://secunia.com/advisories/17924
CVE ID: CVE-2005-4069 State: PUBLISHED Published: 2005-12-08T01:00:00 Last Updated: 2024-08-07T23:31:48.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: SunnComm MediaMax DRM 5.0.21.0, as used by Sony BMG, assigns insecure Everyone/Full Control permissions to the "SunnComm Shared" directory, which allows local users to gain privileges by modifying programs installed in that directory, such as MMX.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2783 - http://www.eff.org/IP/DRM/Sony-BMG/MediaMaxVulnerabilityReport.pdf - http://www.securityfocus.com/bid/15754 - http://www.eff.org/news/archives/2005_12.php#004234 -
VulnerabilityReport.pdf - http://www.securityfocus.com/bid/15754 - http://www.eff.org/news/archives/2005_12.php#004234 - http://www.kb.cert.org/vuls/id/928689 - http://secunia.com/advisories/17933 - http://securitytracker.com/id?1015327
CVE ID: CVE-2005-4070 State: REJECTED Published: 2005-12-08T01:00:00Z Last Updated: 2024-09-17T02:41:58.830Z Description: No description available.
CVE ID: CVE-2005-4071 State: PUBLISHED Published: 2005-12-08T01:00:00 Last Updated: 2024-08-07T23:31:48.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ForumID parameter in view_forum.cfm, and (2) ForumID, (3) Thread, and (4) ThreadID parameters in view_thread.cfm. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23514 - http://www.vupen.com/english/advisories/2005/2794 - http://secunia.com/advisories/17935 - http://pridels0.blogspot.com/2005/12/magic-for
.com/english/advisories/2005/2794 - http://secunia.com/advisories/17935 - http://pridels0.blogspot.com/2005/12/magic-forum-personal-sqlxss-vuln.html - http://www.securityfocus.com/bid/15774 - http://www.osvdb.org/21501 - http://www.osvdb.org/21502
CVE ID: CVE-2005-4072 State: PUBLISHED Published: 2005-12-08T01:00:00 Last Updated: 2024-08-07T23:31:49.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the Words parameter in search_forums.cfm, as used in the "Search For:" field. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2794 - http://secunia.com/advisories/17935 - http://pridels0.blogspot.com/2005/12/magic-forum-personal-sqlxss-vuln.html - http://www.securityfocus.com/bid/15774
CVE ID: CVE-2005-4073 State: PUBLISHED Published: 2005-12-08T01:00:00 Last Updated: 2024-08-07T23:31:48.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_archive.cfm in CFMagic Magic List Pro 2.5 allows remote attackers to execute arbitrary SQL commands via the ListID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17937 - http://www.vupen.com/english/advisories/2005/2793 - http://www.osvdb.org/21504 - http://www.securityfocus.com/bid/15774 - http://pridels0.blogspot.com/2005/12/magic-list-pro-25-sql-inj-vuln.html
CVE ID: CVE-2005-4074 State: PUBLISHED Published: 2005-12-08T01:00:00 Last Updated: 2024-08-07T23:31:49.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.cfm in CF_Nuke 4.6 and earlier, when Sandbox Security is disabled, allows remote attackers to include arbitrary local .cfm files via a .. (dot dot) in the (1) sector or (2) page parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17939 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23539 - http://www.securityfocus.com/bid/15777 - http://www.vupen.com/english/advisories/2005/2795 - http://pridels0.blogspot.com/2005/12/cfnuk
rityfocus.com/bid/15777 - http://www.vupen.com/english/advisories/2005/2795 - http://pridels0.blogspot.com/2005/12/cfnuke-v46-multiple-vuln.html - http://www.osvdb.org/21505
CVE ID: CVE-2005-4075 State: PUBLISHED Published: 2005-12-08T01:00:00 Last Updated: 2024-08-07T23:31:49.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in CF_Nuke 4.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) topic and (2) newsid parameter in the news sector, and (3) cat parameter in the links sector. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17939 - http://www.osvdb.org/21507 - http://www.securityfocus.com/bid/15778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23540 - http://www.vupen.com/english/advisorie
ocus.com/bid/15778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23540 - http://www.vupen.com/english/advisories/2005/2795 - http://pridels0.blogspot.com/2005/12/cfnuke-v46-multiple-vuln.html
CVE ID: CVE-2005-4076 State: PUBLISHED Published: 2005-12-08T01:00:00 Last Updated: 2024-08-07T23:31:48.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Appfluent Technology Database IDS 2.0 allows local users to execute arbitrary code via a long APPFLUENT_HOME environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://open-security.org/advisories/14 - http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0253.html - http://secunia.com/advisories/17947 - http://mantis.pulltheplug.org/display.php?offset=8 - http://www.securityfocus.com/bid/15755
CVE ID: CVE-2005-4077 State: PUBLISHED Published: 2005-12-08T01:00:00 Last Updated: 2024-08-07T23:31:48.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that (1) are malformed in a way that prevents a terminating null byte from being added to either a hostname or path buffer, or (2) contain a "?" separator in the hostname portion, which causes a "/" to be prepended to the resulting string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securit
e prepended to the resulting string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17951 - http://www.gentoo.org/security/en/glsa/glsa-200603-25.xml - http://www.vupen.com/english/advisories/2006/1779 - http://www.us-cert.gov/cas/techalerts/TA06-132A.html - http://www.vupen.com/english/advisories/2005/2791 - http://www.vupen.com/english/advisories/2006/0960 - http://www.debian.org/security/2005/dsa-919 - http://secunia.com/advisories/19433 - http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00020.html - http://www.redhat.com/support/errata/RHSA-2005-875.html - http://www.securityfocus.com/archive/1/418849/100/0/threaded -
http://www.redhat.com/support/errata/RHSA-2005-875.html - http://www.securityfocus.com/archive/1/418849/100/0/threaded - http://www.hardened-php.net/advisory_242005.109.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10855 - http://www.vupen.com/english/advisories/2008/0924/references - https://usn.ubuntu.com/228-1/ - http://secunia.com/advisories/17977 - http://curl.haxx.se/docs/adv_20051207.html - http://secunia.com/advisories/18105 - http://www.securityfocus.com/bid/15756 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.16/SCOSA-2006.16.txt - http://lists.apple.com/archives/security-announce/2006/May/msg00003.html - http://lists.apple.com/a
/SCOSA-2006.16.txt - http://lists.apple.com/archives/security-announce/2006/May/msg00003.html - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://secunia.com/advisories/18336 - http://secunia.com/advisories/19261 - http://www.gentoo.org/security/en/glsa/glsa-200512-09.xml - http://www.trustix.org/errata/2005/0072/ - http://secunia.com/advisories/17965 - http://qa.openoffice.org/issues/show_bug.cgi?id=59032 - http://secunia.com/advisories/19457 - http://docs.info.apple.com/article.html?artnum=307562 - http://secunia.com/advisories/17960 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:224 - http://secunia.com/advisories/17907 - http://secunia.com/a
://www.mandriva.com/security/advisories?name=MDKSA-2005:224 - http://secunia.com/advisories/17907 - http://secunia.com/advisories/20077 - http://secunia.com/advisories/18188 - http://secunia.com/advisories/17961
CVE ID: CVE-2005-4078 State: PUBLISHED Published: 2005-12-08T01:00:00 Last Updated: 2024-08-07T23:31:48.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Ideal BB.NET 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) forumID, (2) boardID, and (3) topicRepeater1-p parameters in topics.aspx, (4) boardID parameter in categoryindex.aspx, (5) postID parameter in posts.aspx, (6) catID parameter in forums.aspx, and (7) memberID parameter in member.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/ideal-bbnet-13-xss-vuln.html - http://
otes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/ideal-bbnet-13-xss-vuln.html - http://secunia.com/advisories/17906 - http://www.vupen.com/english/advisories/2005/2757 - http://www.osvdb.org/21514 - http://www.osvdb.org/21515 - http://www.osvdb.org/21511 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23471 - http://www.osvdb.org/21512 - http://www.osvdb.org/21513
CVE ID: CVE-2005-4079 State: PUBLISHED Published: 2005-12-08T01:00:00 Last Updated: 2024-08-07T23:31:48.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: The register_globals emulation in phpMyAdmin 2.7.0 rc1 allows remote attackers to exploit other vulnerabilities in phpMyAdmin by modifying the import_blacklist variable in grab_globals.php, which can then be used to overwrite other variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423142/100/0/threaded - http://securityreason.com/securityalert/237 - http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0 - http://www.gentoo.org/security/en/glsa/glsa-200512-0
37 - http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0 - http://www.gentoo.org/security/en/glsa/glsa-200512-03.xml - http://www.securityfocus.com/bid/15761 - http://secunia.com/advisories/17925/ - http://www.hardened-php.net/advisory_252005.110.html - http://secunia.com/advisories/17957 - http://www.securityfocus.com/archive/1/418834/100/0/threaded - http://secunia.com/advisories/18618 - http://www.vupen.com/english/advisories/2005/2792 - http://www.osvdb.org/21508 - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-9
CVE ID: CVE-2005-4080 State: PUBLISHED Published: 2005-12-08T01:00:00 Last Updated: 2024-08-07T23:31:49.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via UTF16 encoded attachments and strings that will be executed when viewed using Internet Explorer, which ignores the characters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/232 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23465 - http://www.securityfocus.com/bid/15730/ - http://secunia.com/advi
//exchange.xforce.ibmcloud.com/vulnerabilities/23465 - http://www.securityfocus.com/bid/15730/ - http://secunia.com/advisories/17910 - http://www.securityfocus.com/archive/1/418734/100/0/threaded - http://www.vupen.com/english/advisories/2005/2773 - http://securitytracker.com/id?1015315
CVE ID: CVE-2005-4081 State: PUBLISHED Published: 2005-12-08T01:00:00 Last Updated: 2024-08-07T23:31:49.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and possibly execute arbitrary SQL commands via the username and password parameters in (1) the user login and (2) administrator login pages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23507 - http://www.securityfocus.com/bid/15699/ - http://www.osvdb.org/21622 - http://securityreason.com/securityalert/228 - http://www.securityfocus.com/archi
d/15699/ - http://www.osvdb.org/21622 - http://securityreason.com/securityalert/228 - http://www.securityfocus.com/archive/1/418510/100/0/threaded
CVE ID: CVE-2005-4082 State: PUBLISHED Published: 2005-12-08T01:00:00 Last Updated: 2024-08-07T23:31:49.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dhcp.client program for QNX 4.25 vmware is setuid, possibly by default, which allows local users to modify the NIC configuration and conduct other attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15785 - http://secunia.com/advisories/17870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23543 - http://www.securityfocus.com/archive/1/418513/100/0/threaded
CVE ID: CVE-2005-4083 State: PUBLISHED Published: 2005-12-08T01:00:00 Last Updated: 2024-08-07T23:31:49.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in xs_edit.php in the eXtreme Styles phpBB module 2.2.1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the edit parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/418518/100/0/threaded
CVE ID: CVE-2005-4084 State: PUBLISHED Published: 2005-12-08T01:00:00 Last Updated: 2024-08-07T23:31:49.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: xs_edit.php in the phpBB eXtreme Styles module 2.2.1 and earlier allows remote attackers to obtain the installation path of the application via an invalid viewbackup parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/418518/100/0/threaded
CVE ID: CVE-2005-4085 State: PUBLISHED Published: 2006-01-06T11:00:00 Last Updated: 2024-08-07T23:31:48.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18909 - http://securitytracker.com/id?1015441 - http://www.vupen.com/english/advisories/2006/0622 - http://www.vupen.com/english/advisories/2006/0065 - http://secunia.com/advisories/18288 - http://www.idefense.com/intelligence/vulnerabili
om/english/advisories/2006/0065 - http://secunia.com/advisories/18288 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=364 - http://www.bluecoat.com/support/knowledge/advisory_host_header_stack_overflow.html - http://www.securityfocus.com/bid/16147
CVE ID: CVE-2005-4086 State: PUBLISHED Published: 2005-12-08T11:00:00 Last Updated: 2024-08-07T23:31:49.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the beanFiles array parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015322 - http://www.securityfocus.com/archive/1/418840 - http://www.securityfocus.com/bid/15760 - http://www.vupen.com/english/advisories/2005/2800 - http://rgod.altervista.org/su
tp://www.securityfocus.com/bid/15760 - http://www.vupen.com/english/advisories/2005/2800 - http://rgod.altervista.org/sugar_suite_40beta.html - http://secunia.com/advisories/17948
CVE ID: CVE-2005-4087 State: PUBLISHED Published: 2005-12-08T11:00:00 Last Updated: 2024-08-07T23:31:49.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the beanFiles array parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/418840 - http://securityreason.com/securityalert/239 - http://www.securityfocus.com/bid/15760 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23541
CVE ID: CVE-2005-4088 State: PUBLISHED Published: 2005-12-08T11:00:00 Last Updated: 2024-08-07T23:31:48.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) parent and (2) day parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17915 - http://www.vupen.com/english/advisories/2005/2764 - http://www.osvdb.org/21484 - http://www.securityfocus.com/bid/15736
CVE ID: CVE-2005-4089 State: PUBLISHED Published: 2005-12-08T11:00:00 Last Updated: 2024-08-07T23:31:49.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files from other domains that are not valid Cascading Style Sheets (CSS) files, as demonstrated using Google Desktop, aka "CSSXSS" and "CSS Cross-Domain Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17564 - https://oval.cisecurity.org/repository/search/definition/oval%3A