deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-0475
Published: 2005-03-30
Description: SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary SQL code via the (1) offset, (2) limit, (3) order, or (4) orderby parameter to question.php, (5) offset parameter to answer.php, (6) search_item parameter to search.php, (7) cat_id, (8) cid, or (9) id parameter to comment.php.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3487&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/19371; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3487&w=2
CVE: CVE-2005-0476
Published: 2005-03-30
Description: Cross-site scripting (XSS) vulnerability in hpm_guestbook.cgi allows remote attackers to inject arbitrary web script or HTML by posting a message.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5397&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/19372; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5397&w=2
CVE: CVE-2005-0477
Published: 2005-03-30
Description: Cross-site scripting (XSS) vulnerability in the SML code for Invision Power Board 1.3.1 FINAL allows remote attackers to inject arbitrary web script via (1) a signature file or (2) a message post containing an IMG tag within a COLOR tag whose style is set to background:url.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2995&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/19399; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2995&w=2
CVE: CVE-2005-0478
Published: 2005-03-30
Description: Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP request with a long User-Agent header or (2) a long argument to an arbitrary PHP script.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/390918; http://www.securityfocus.com/bid/12592; https://exchange.xforce.ibmcloud.com/vulnerabilities/19409
CVE: CVE-2005-0479
Published: 2005-03-30
Description: Directory traversal vulnerability in ComGetLogFile.php3 for TrackerCam 5.12 and earlier allows remote attackers to read arbitrary files via ".." sequences and (1) "/" slash), (2) "\" (backslash), or (3) hex-encoded characters in the fn parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/390918; http://www.securityfocus.com/bid/12592; https://exchange.xforce.ibmcloud.com/vulnerabilities/19414
CVE: CVE-2005-0480
Published: 2005-03-30
Description: Cross-site scripting (XSS) vulnerability in TrackerCam 5.12 and earlier allows remote attackers to inject arbitrary HTML or web script via the login request, which is recorded in a log file but not properly handled when the administrator views the log file.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/archive/1/390918; http://www.securityfocus.com/bid/12592; https://exchange.xforce.ibmcloud.com/vulnerabilities/19416
CVE: CVE-2005-0481
Published: 2005-03-30
Description: TrackerCam 5.12 and earlier allows remote attackers to read log files via the fn parameter in a direct request to the ComGetLogFile.php3 script.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/390918; http://www.securityfocus.com/bid/12592; https://exchange.xforce.ibmcloud.com/vulnerabilities/19415
CVE: CVE-2005-0482
Published: 2005-03-30
Description: TrackerCam 5.12 and earlier allows remote attackers to cause a denial of service (crash) via (1) a large number of connections with a negative Content-Length header, possibly triggering an integer signedness error, or (2) a large amount of data.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/390918; http://www.securityfocus.com/bid/12592; https://exchange.xforce.ibmcloud.com/vulnerabilities/19417
CVE: CVE-2005-0483
Published: 2005-03-30
Description: Multiple directory traversal vulnerabilities in sitenfo.sh, sitezipchk.sh, and siteziplist.sh in Glftpd 1.26 to 2.00 allow remote authenticated users to (1) determine the existence of arbitrary files, (2) list files in restricted directories, or (3) read arbitrary files from within ZIP or gzip files, via .. (dot dot) sequences and globbing ("*") characters in a SITE NFO command.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/390924; http://www.securityfocus.com/bid/12586; https://exchange.xforce.ibmcloud.com/vulnerabilities/19401
CVE: CVE-2005-0484
Published: 2005-03-30
Description: Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code via an FTP transfer with a crafted filename that causes format string specifiers to be inserted into the ProFTPD transfer log.
CVSS Score: 7.5 (HIGH)
References: http://bugs.gentoo.org/show_bug.cgi?id=81894; http://security.gentoo.org/glsa/glsa-200502-26.xml; http://bugs.gentoo.org/show_bug.cgi?id=81894
CVE: CVE-2005-0485
Published: 2005-03-30
Description: Cross-site scripting (XSS) vulnerability in comment.php for paNews 2.0b4 for PHP Arena allows remote attackers to inject arbitrary HTML and web script via the showpost parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5906&w=2; http://www.securityfocus.com/bid/12576; https://exchange.xforce.ibmcloud.com/vulnerabilities/19359
CVE: CVE-2005-0486
Published: 2005-03-30
Description: Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the authentication scheme.
CVSS Score: 5.0 (MEDIUM)
References: http://www.tarantella.com/security/bulletin-11.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/19407; http://www.tarantella.com/security/bulletin-11.html
CVE: CVE-2005-0487
Published: 2005-03-30
Description: Cross-site scripting (XSS) vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to inject arbitrary HTML and web script via the nav parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]9888&w=2; http://www.securityfocus.com/bid/12563; https://exchange.xforce.ibmcloud.com/vulnerabilities/18571
CVE: CVE-2005-0943
Published: 2005-03-30
Description: Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted HTTPS packet.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14784; http://www.cisco.com/warp/public/707/cisco-sa-20050330-vpn3k.shtml; http://www.securityfocus.com/bid/12948
CVE: CVE-2005-0957
Published: 2005-03-31
Description: Bay Technical Associates RPC-3 Telnet Host 3.05 allows remote attackers to bypass authentication by pressing the escape and enter keys at the username prompt.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5271&w=2; http://www.securityfocus.com/bid/12955; https://exchange.xforce.ibmcloud.com/vulnerabilities/19921
CVE: CVE-2005-0749
Published: 2005-04-01
Description: The load_elf_library in the Linux kernel before 2.6.11.6 allows local users to cause a denial of service (kernel crash) via a crafted ELF library or executable, which causes a free of an invalid pointer.
CVSS Score: 7.2 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U; http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.6; http://secunia.com/advisories/14713/
CVE: CVE-2005-1035
Published: 2005-04-05
Description: Multiple buffer overflows in Pavuk before 0.9.32 have unknown attack vectors and impact.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14571; http://sourceforge.net/project/shownotes.php?release_id=313436; http://secunia.com/advisories/14571
CVE: CVE-2005-1029
Published: 2005-04-06
Description: Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) itemID parameter to ItemInfo.asp, or (5) Email field to sendpassword.asp.
CVSS Score: 7.5 (HIGH)
References: http://digitalparadox.org/advisories/aass.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0432&w=2; http://secunia.com/advisories/14839
CVE: CVE-2005-1032
Published: 2005-04-06
Description: Rejected reason: cart.php in LiteCommerce might allow remote attackers to obtain sensitive information via invalid (1) category_id or (2) product_id parameters.  NOTE: this issue was originally claimed to be due to SQL injection, but the original researcher is known to be frequently inaccurate with respect to bug type and severity.  The vendor has disputed this issue, saying "These reports are credited to malicious person we refused to hire. We have not taken legal action against him only because he is located in India.  The vulnerabilites reported can not be reproduced, hence information you provide is contrary to fact." Further investigation by CVE personnel shows that an invalid SQL syntax error could be generated, but it only reveals portions of underlying database structure, which is already available in documentation from the vendor, and it does not appear to lead to path disclosure.  Therefore, this issue is not a vulnerability or an exposure, and it probably should be REJECTED
CVE: CVE-2005-1096
Published: 2005-04-06
Description: SQL injection vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to execute arbitrary SQL commands via the UserID parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14864; http://securitytracker.com/id?1013667; http://www.hackerscenter.com/archive/view.asp?id=1865
CVE: CVE-2005-0351
Published: 2005-04-07
Description: Buffer overflow in (1) termsh, (2) atcronsh, and (3) auditsh in SCO OpenServer 5.0.6 and 5.0.7 might allow local users to execute arbitrary code via a long HOME environment variable.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-119
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.15/SCOSA-2005.15.txt; http://www.securityfocus.com/bid/13062; ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.15/SCOSA-2005.15.txt
CVE: CVE-2005-1047
Published: 2005-04-07
Description: Meilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, which allows remote authenticated users to execute arbitrary commands by uploading PHP files, then directly requesting them from the uploads directory.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0534&w=2; http://securitytracker.com/id?1013671; http://www.defacers.com.mx/advisories/2.txt
CVE: CVE-2005-1087
Published: 2005-04-07
Description: CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/14861; http://securitytracker.com/id?1013666; http://www.osvdb.org/15362
CVE: CVE-2005-1067
Published: 2005-04-08
Description: Vulnerability in Access_user Class before 1.75 allows local users to gain access as other users via the password "new".
CVSS Score: 7.5 (HIGH)
References: http://freshmeat.net/projects/access_user/?branch_id=53852&release_id=192770; http://secunia.com/advisories/14897; http://www.osvdb.org/15348
CVE: CVE-2005-1072
Published: 2005-04-08
Description: Cross-site scripting (XSS) vulnerability in PunBB before 1.2.5 allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/14882; http://www.punbb.org/; http://secunia.com/advisories/14882
CVE: CVE-2005-1094
Published: 2005-04-08
Description: FTP Now 2.6.14 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/14889; http://securitytracker.com/id?1013657; http://www.osvdb.org/15296
CVE: CVE-2005-1082
Published: 2005-04-09
Description: Multiple SQL injection vulnerabilities in AzDGDatingPlatinum 1.1.0 allows remote attackers to execute arbitrary SQL commands via (1) the id parameter to view.php or (2) the from parameter to members/index.php.
CVSS Score: 7.5 (HIGH)
References: http://www.osvdb.org/15525; http://www.securityfocus.com/archive/1/395530; http://www.securityfocus.com/archive/1/438607/100/100/threaded
CVE: CVE-2005-1055
Published: 2005-04-10
Description: TowerBlog 0.6 and earlier stores the login data file under the web root, which allows remote attackers to obtain the MD5 checksums of the username and password via a direct request to the _dat/login file.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3019&w=2; http://secunia.com/advisories/14884; http://securitytracker.com/id?1013675
CVE: CVE-2005-1064
Published: 2005-04-10
Description: The copy_symlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the symlink itself, which allows local users to obtain access to arbitrary files.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]1000&w=2; http://secunia.com/advisories/14878; http://securitytracker.com/id?1013674
CVE: CVE-2005-1070
Published: 2005-04-11
Description: SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to execute arbitrary SQL commands via the st parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/archive/1/395515; http://www.securityfocus.com/bid/13097; http://www.securitytracker.com/alerts/2005/Apr/1013676.html
CVE: CVE-2005-1089
Published: 2005-04-11
Description: Unknown vulnerability in DC++ before 0.674 allows attackers to append data to arbitrary files.
CVSS Score: 5.0 (MEDIUM)
References: http://dcplusplus.sourceforge.net/index.php?t=8&s=1; http://secunia.com/advisories/14880; http://www.osvdb.org/15433
CVE: CVE-2004-0790
Published: 2005-04-12
Description: Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.4/SCOSA-2006.4.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4255&w=2; http://secunia.com/advisories/18317
CVE: CVE-2004-0791
Published: 2005-04-12
Description: Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the "ICMP Source Quench attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.4/SCOSA-2006.4.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4255&w=2; http://secunia.com/advisories/18317
CVE: CVE-2005-0555
Published: 2005-04-12
Description: Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a crafted Content Advisor file, aka "Content Advisor Memory Corruption Vulnerability."
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14922/; http://www.kb.cert.org/vuls/id/222050; http://www.us-cert.gov/cas/techalerts/TA05-102A.html
CVE: CVE-2005-0562
Published: 2005-04-12
Description: GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14915/; http://www.kb.cert.org/vuls/id/633446; http://www.us-cert.gov/cas/techalerts/TA05-102A.html
CVE: CVE-2005-0610
Published: 2005-04-12
Description: Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkg_fetch, (2) overwrite arbitrary files via temporary files when portupgrade upgrades a port or package, or (3) create arbitrary zero-byte files via the pkgdb.fixme temporary file.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/14903; http://www.securityfocus.com/bid/13106; http://www.vuxml.org/freebsd/22f00553-a09d-11d9-a[PII_REDACTED]eed82.html
CVE: CVE-2005-1071
Published: 2005-04-12
Description: SQL injection vulnerability in banner.inc.php in JPortal Web Portal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the haslo parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3323&w=2; http://secunia.com/advisories/14919; http://www.osvdb.org/15476
CVE: CVE-2005-1077
Published: 2005-04-12
Description: Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.4.x allow remote attackers to inject arbitrary web script or HTML via (1) cds.php, (2) Guestbook-EN.pl, or (3) phonebook.php.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]9182&w=2; http://www.securityfocus.com/bid/13126; http://www.securityfocus.com/bid/13127
CVE: CVE-2005-1078
Published: 2005-04-12
Description: XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]9182&w=2; http://www.securityfocus.com/bid/13131; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]9182&w=2
CVE: CVE-2005-1099
Published: 2005-04-12
Description: Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is listening on a network interface, allow remote attackers to execute arbitrary code.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3880&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5670&w=2; http://secunia.com/advisories/14941
CVE: CVE-2005-1103
Published: 2005-04-12
Description: Sygate Security Agent (SSA) in Sygate Secure Enterprise 3.5 through 4.1 does not prevent the security policy from being updated by unprivileged users, which allows local users to modify the policy by exporting the policy file, changing it, and importing it back into SSA.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1828&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1828&w=2
CVE: CVE-2005-1130
Published: 2005-04-12
Description: Cross-site scripting (XSS) vulnerability in index.php in Pinnacle Cart allows remote attackers to inject arbitrary web script or HTML via the pg parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/14924; http://systemsecure.org/board/index.php?showtopic=8; http://www.osvdb.org/15485
CVE: CVE-2005-1143
Published: 2005-04-12
Description: Cross-site scripting (XSS) vulnerability in index.php in EasyPHPCalendar before 6.2.8 allows remote attackers to inject arbitrary web script or HTML via the yr parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://docs.easyphpcalendar.com/Change%20Log/changeLog.htm; http://securitytracker.com/id?1013704; http://www.osvdb.org/15544
CVE: CVE-2005-1144
Published: 2005-04-12
Description: popup.php in EasyPHPCalendar before 6.2.8 allows remote attackers to obtain sensitive information via an invalid ev parameter, which reveals the full pathname of the web server in a PHP error message.
CVSS Score: 5.0 (MEDIUM)
References: http://docs.easyphpcalendar.com/Change%20Log/changeLog.htm; http://securitytracker.com/id?1013704; http://www.osvdb.org/15545
CVE: CVE-2005-1145
Published: 2005-04-12
Description: NOTE: this issue has been disputed by the vendor.  Cross-site scripting (XSS) vulnerability in calendar.pl in CalendarScript 3.20 allows remote attackers to inject arbitrary web script or HTML via the template parameter, a different vulnerability than CVE-2005-1146
CVSS Score: 4.3 (MEDIUM)
References: http://securitytracker.com/id?1013705; http://www.osvdb.org/15547; http://www.snkenjoi.com/secadv/secadv3.txt
CVE: CVE-2005-1146
Published: 2005-04-12
Description: NOTE: this issue has been disputed by the vendor.  Cross-site scripting (XSS) vulnerability in the login command in calendar.pl in CalendarScript 3.21 allows remote attackers to inject arbitrary web script or HTML via the username parameter, a different vulnerability than CVE-2005-1145
CVSS Score: 4.3 (MEDIUM)
References: http://securitytracker.com/id?1013705; http://www.snkenjoi.com/secadv/secadv3.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/20103
CVE: CVE-2005-1147
Published: 2005-04-12
Description: calendar.pl in CalendarScript 3.20 allows remote attackers to obtain sensitive information via invalid (1) calendar or (2) template parameters, which leaks the full pathname and debug information.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1013705; http://www.osvdb.org/15546; http://www.snkenjoi.com/secadv/secadv3.txt
CVE: CVE-2005-1134
Published: 2005-04-13
Description: SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) url_id or (2) entry_id parameters.
CVSS Score: 7.5 (HIGH)
References: http://seclists.org/lists/bugtraq/2005/Apr/0195.html; http://secunia.com/advisories/15145; http://securitytracker.com/id?1013699
CVE: CVE-2005-1149
Published: 2005-04-13
Description: SQL injection vulnerability in admin/login.asp in aspclick.it ACNews 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1013681; http://www.osvdb.org/15494; http://www.securityfocus.com/bid/13148
CVE: CVE-2005-1301
Published: 2005-04-13
Description: nProtect:Netizen 2005.3.17.1 does not properly verify that the update module is downloaded from an authorized site, which allows remote malicious web sites to write arbitrary files.
CVSS Score: 2.6 (LOW)
References: http://jvn.jp/jp/JVN%23AF02FB4B/index.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9376&w=2; http://secunia.com/advisories/15101
CVE: CVE-2004-0812
Published: 2005-04-14
Description: Unknown vulnerability in the Linux kernel before 2.4.23, on the AMD AMD64 and Intel EM64T architectures, associated with "setting up TSS limits," allows local users to cause a denial of service (crash) and possibly execute arbitrary code.
CVSS Score: 2.1 (LOW)
References: http://linux.bkbits.net:8080/linux-2.6/cset%403fad673ber4GuU7iWppydzNIyLntEQ; http://secunia.com/advisories/13359; http://www.ciac.org/ciac/bulletins/p-047.shtml
CVE: CVE-2004-1004
Published: 2005-04-14
Description: Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/13863/; http://www.debian.org/security/2005/dsa-639; http://www.gentoo.org/security/en/glsa/glsa-200502-24.xml