deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-1017
Published: 2005-05-02
Description: SQL injection vulnerability in the Update_Events function in events_functions.asp in MaxWebPortal 1.33 and earlier allows remote attackers to execute arbitrary SQL commands via the EVENT_ID parameter, as demonstrated using events.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/14752; http://securitytracker.com/id?1013617; http://www.hackerscenter.com/archive/view.asp?id=1807
CVE: CVE-2005-1018
Published: 2005-05-02
Description: Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticated users to cause a denial of service or execute arbitrary code via an agent request to TCP port 6050 with a large argument before the option field.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2682&w=2; http://www.idefense.com/application/poi/display?id=232&type=vulnerabilities; http://www.securityfocus.com/archive/1/390760
CVE: CVE-2005-1019
Published: 2005-05-02
Description: Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8249&w=2; http://security-tmp.h14.ru/exploits/23laeon.c.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/19951
CVE: CVE-2005-1020
Published: 2005-05-02
Description: Secure Shell (SSH) 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service (device reload) (1) via a username that contains a domain name when using a TACACS+ server to authenticate, (2) when a new SSH session is in the login phase and a currently logged in user issues a send command, or (3) when IOS is logging messages and an SSH session is terminated while the server is sending data.
CVSS Score: 7.1 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/14854; http://www.cisco.com/warp/public/707/cisco-sa-20050406-ssh.shtml; http://www.securityfocus.com/bid/13043
CVE: CVE-2005-1021
Published: 2005-05-02
Description: Memory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a TACACS+ server, allows remote attackers to cause a denial of service (memory consumption) via an incorrect username or password.
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/14854; http://www.cisco.com/warp/public/707/cisco-sa-20050406-ssh.shtml; http://www.osvdb.org/15303
CVE: CVE-2005-1022
Published: 2005-05-02
Description: ColdFusion 6.1 Updater 1 places Java .class files under the web root in the /WEB-INF/cfclasses directory, which allows remote attackers to obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1801&w=2; http://www.macromedia.com/devnet/security/security_zone/mpsb05-02.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1801&w=2
CVE: CVE-2005-1023
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x to 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) min parameter to the Search module, (2) the categories parameter to the FAQ module, or (3) the ltr parameter to the Encyclopedia module.  NOTE: the bid parameter issue in banners.php is already an item in CVE-2005-1000.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8478&w=2; http://www.securityreason.com/adv/PHPNuke%206.x-7.6-p1.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/19952
CVE: CVE-2005-1024
Published: 2005-05-02
Description: modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) my_headlines, (2) userinfo, or (3) search, which reveals the path in a PHP error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8478&w=2; http://www.securityreason.com/adv/PHPNuke%206.x-7.6-p1.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/19953
CVE: CVE-2005-1025
Published: 2005-05-02
Description: The FTP server in AS/400 4.3, when running in IFS mode, allows remote attackers to obtain sensitive information via a symlink attack using RCMD and the ADDLNK utility, as demonstrated using the QSYS.LIB library.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9017&w=2; http://www.osvdb.org/15300; http://www.venera.com/downloads/AS400_user_accounts_ftp_disclosure.pdf
CVE: CVE-2005-1026
Published: 2005-05-02
Description: Multiple SQL injection vulnerabilities in SnailSource phpBB 2.0.x mods allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to dlman.php in DLMan Pro or (2) id parameter to links.php in Linkz Pro (aka LinksLinks Pro).
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9594&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8195&w=2; http://www.securityfocus.com/bid/13028
CVE: CVE-2005-1027
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x through 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter in the Your_Account module, (2) avatarcategory parameter in the Your_Account module, or (3) lid parameter in the Downloads module.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3144&w=2; http://www.securityfocus.com/archive/1/321324; http://www.securityfocus.com/bid/7570
CVE: CVE-2005-1028
Published: 2005-05-02
Description: PHP-Nuke 6.x through 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) index.php with the forum_admin parameter set, (2) the Surveys module, or (3) the Your_Account module, which reveals the path in a PHP error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3144&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3144&w=2
CVE: CVE-2005-1030
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL parameter to account.asp, (5) Table, (6) Title parameter to sendpassword.asp, or (7) itemid to watchthisitem.asp.
CVSS Score: 4.3 (MEDIUM)
References: http://digitalparadox.org/advisories/aass.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0432&w=2; http://secunia.com/advisories/14839
CVE: CVE-2005-1031
Published: 2005-05-02
Description: RUNCMS 1.1A, and possibly other products based on e-Xoops (exoops), when "Allow custom avatar upload" is enabled, does not properly verify uploaded files, which allows remote attackers to upload arbitrary files.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8450&w=2; http://secunia.com/advisories/14869; http://www.runcms.org/public/modules/news/
CVE: CVE-2005-1033
Published: 2005-05-02
Description: CubeCart 2.0.6 allows remote attackers to obtain sensitive information via an invalid (1) language parameter to index.php, (2) PHPSESSID parameter to index.php, (3) product parameter to tellafriend.php, (4) add parameter to view_cart.php, or (5) product parameter to view_product.php, which reveals the path in a PHP error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8479&w=2; http://securitytracker.com/id?1013660; http://www.osvdb.org/14064
CVE: CVE-2005-1034
Published: 2005-05-02
Description: SurgeFTP 2.2m1 allows remote attackers to cause a denial of service (application hang) via the LEAK command.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4780&w=2; http://secunia.com/advisories/14888; http://securitytracker.com/id?1013664
CVE: CVE-2005-1036
Published: 2005-05-02
Description: FreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow user access to certain hardware, which allows local users to bypass intended access restrictions to cause a denial of service, obtain sensitive information, and possibly gain privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-909
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:03.amd64.asc; ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:03.amd64.asc
CVE: CVE-2005-1037
Published: 2005-05-02
Description: Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/14856; http://www-1.ibm.com/support/search.wss?rs=0&q=IY68825&apar=only; http://www.niscc.gov.uk/niscc/docs/br-20[PII_REDACTED]8.html?lang=en
CVE: CVE-2005-1038
Published: 2005-05-02
Description: crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink.  NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235.
CVSS Score: 2.1 (LOW)
References: ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U; http://secunia.com/advisories/19532; http://secunia.com/advisories/20666
CVE: CVE-2005-1039
Published: 2005-05-02
Description: Race condition in Core Utilities (coreutils) 5.2.1, when (1) mkdir, (2) mknod, or (3) mkfifo is running with the -m switch, allows local users to modify permissions of other files.
CVSS Score: 3.7 (LOW)
References: http://www.securityfocus.com/bid/13053; http://www.securityfocus.com/bid/13053
CVE: CVE-2005-1040
Published: 2005-05-02
Description: Multiple unknown vulnerabilities in netapplet in Novell Linux Desktop 9 allow local users to gain root privileges, related to "User input [being] passed to network scripts without verification."
CVSS Score: 7.2 (HIGH)
References: http://lists.suse.com/archive/suse-security-announce/2005-Apr/0002.html; http://lists.suse.com/archive/suse-security-announce/2005-Apr/0002.html
CVE: CVE-2005-1041
Published: 2005-05-02
Description: The fib_seq_start function in fib_hash.c in Linux kernel allows local users to cause a denial of service (system crash) via /proc/net/route.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bk-commits-head&m=[PII_REDACTED]6769&w=2; http://secunia.com/advisories/17918; http://www.redhat.com/support/errata/RHSA-2005-366.html
CVE: CVE-2005-1042
Published: 2005-05-02
Description: Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count.
CVSS Score: 7.5 (HIGH)
References: http://cvs.php.net/diff.php/php-src/ext/exif/exif.c?r1=1.118.2.33&r2=1.118.2.34&ty=u; http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html; http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml
CVE: CVE-2005-1044
Published: 2005-05-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-0941.  Reason: This candidate is a duplicate of CVE-2005-0941.  Notes: All CVE users should reference CVE-2005-0941 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-1045
Published: 2005-05-02
Description: OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote attackers to execute arbitrary commands via a UNC path in a bookmark.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1293&w=2; http://secunia.com/advisories/14898/; http://securitytracker.com/id?1013665
CVE: CVE-2005-1046
Published: 2005-05-02
Description: Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file.
CVSS Score: 7.5 (HIGH)
References: http://bugs.kde.org/show_bug.cgi?id=102328; http://secunia.com/advisories/14908; http://secunia.com/advisories/28114
CVE: CVE-2005-1048
Published: 2005-05-02
Description: SQL injection vulnerability in modules.php in PostNuke 0.760 RC3 allows remote attackers to execute arbitrary SQL statements via the sid parameter.  NOTE: the vendor reports that they could not reproduce the issues for 760 RC3, or for .750.
CVSS Score: 7.5 (HIGH)
References: http://digitalparadox.org/advisories/postnuke.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9957&w=2; http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2679
CVE: CVE-2005-1049
Published: 2005-05-02
Description: Multiple cross-site scripting vulnerabilities in PostNuke 0.760-RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) module parameter to admin.php or (2) op parameter to user.php. NOTE: the vendor reports that certain issues could not be reproduced for 760 RC3, or for .750.  However, the op/user.php issue exists when the pnAntiCracker setting is disabled.
CVSS Score: 2.6 (LOW)
References: http://cvs.postnuke.com/viewcvs.cgi/Historic_PostNuke_Library/postnuke-devel/html/user.php.diff?r1=1.18&r2=1.19; http://digitalparadox.org/advisories/postnuke.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9957&w=2
CVE: CVE-2005-1050
Published: 2005-05-02
Description: The modload op in the Reviews module for PostNuke 0.760-RC3 allows remote attackers to obtain sensitive information via an invalid id parameter, which reveals the path in a PHP error message.
CVSS Score: 5.0 (MEDIUM)
References: http://digitalparadox.org/advisories/postnuke.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9957&w=2; http://securitytracker.com/id?1013670
CVE: CVE-2005-1051
Published: 2005-05-02
Description: SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a change_email action.
CVSS Score: 6.5 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6155&w=2; http://secunia.com/advisories/14882; http://www.securityfocus.com/bid/13071
CVE: CVE-2005-1052
Published: 2005-05-02
Description: Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses.
CVSS Score: 5.0 (MEDIUM)
References: http://www.idefense.com/application/poi/display?id=227&type=vulnerabilities; https://exchange.xforce.ibmcloud.com/vulnerabilities/20026; http://www.idefense.com/application/poi/display?id=227&type=vulnerabilities
CVE: CVE-2005-1053
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in orderwiz.php in ModernBill 4.3.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) c_code or (2) aid parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2183&w=2; http://secunia.com/advisories/14890; http://securitytracker.com/id?1013672
CVE: CVE-2005-1054
Published: 2005-05-02
Description: PHP remote file inclusion vulnerability in news.php in ModernBill 4.3.0 and earlier allows remote attackers to execute arbitrary PHP code by modifying the DIR parameter to reference a URL on a remote web server that contains the code.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2183&w=2; http://secunia.com/advisories/14890; http://securitytracker.com/id?1013672
CVE: CVE-2005-1056
Published: 2005-05-02
Description: Unknown vulnerability in HP OpenView Network Node Manager (NMM) 6.2 through 6.4, and 7.01 through 7.50, allows remote attackers to cause a denial of service.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14865; http://securitytracker.com/id?1013651; http://www.osvdb.org/15321
CVE: CVE-2005-1057
Published: 2005-05-02
Description: Cisco IOS 12.2T, 12.3 and 12.3T, when using Easy VPN Server XAUTH version 6 authentication, allows remote attackers to bypass authentication via a "malformed packet."
CVSS Score: 7.5 (HIGH)
References: http://www.cisco.com/warp/public/707/cisco-sa-20050406-xauth.shtml; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5852; http://www.cisco.com/warp/public/707/cisco-sa-20050406-xauth.shtml
CVE: CVE-2005-1058
Published: 2005-05-02
Description: Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 negotiation, may not process certain attributes in the ISAKMP profile that specifies XAUTH, which allows remote attackers to bypass XAUTH and move to Phase 2 negotiations.
CVSS Score: 7.5 (HIGH)
References: http://www.cisco.com/warp/public/707/cisco-sa-20050406-xauth.shtml; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5738; http://www.cisco.com/warp/public/707/cisco-sa-20050406-xauth.shtml
CVE: CVE-2005-1059
Published: 2005-05-02
Description: Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data parameter to changepw.html.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/14871; http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-04/0148.html; http://www.securityfocus.com/bid/13051
CVE: CVE-2005-1060
Published: 2005-05-02
Description: Unknown vulnerability in the TCP/IP functionality (TCPIP.NLM) in Novell Netware 6.x allows remote attackers to cause a denial of service (ABEND by Page Fault Processor Exception) via certain packets.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14874; http://support.novell.com/cgi-bin/search/searchtid.cgi?/2970467.htm; http://www.securityfocus.com/bid/13067
CVE: CVE-2005-1061
Published: 2005-05-02
Description: The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the secure file that are later used as part of a regular expression, which causes the parser to crash, aka "logwatch log processing regular expression DoS."
CVSS Score: 5.0 (MEDIUM)
References: http://www.redhat.com/support/errata/RHSA-2005-364.html; https://bugzilla.redhat.com/bugzilla-old/show_bug.cgi?id=137502; http://www.redhat.com/support/errata/RHSA-2005-364.html
CVE: CVE-2005-1062
Published: 2005-05-02
Description: The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods.
CVSS Score: 7.5 (HIGH)
References: http://research.tic.udc.es/scg/advisories/20050429-1.txt; http://www.kerio.com/security_advisory.html; http://www.securityfocus.com/archive/1/397221
CVE: CVE-2005-1065
Published: 2005-05-02
Description: tetex in Novell Linux Desktop 9 allows local users to determine the existence of arbitrary files via a symlink attack in the /var/cache/fonts directory.
CVSS Score: 2.1 (LOW)
References: http://lists.suse.com/archive/suse-security-announce/2005-Apr/0002.html; http://www.securityfocus.com/bid/13072; http://lists.suse.com/archive/suse-security-announce/2005-Apr/0002.html
CVE: CVE-2005-1066
Published: 2005-05-02
Description: Race condition in rpdump in Pine 4.62 and earlier allows local users to overwrite arbitrary files via a symlink attack.
CVSS Score: 1.2 (LOW)
References: http://msgs.securepoint.com/cgi-bin/get/bugtraq0504/126.html; http://secunia.com/advisories/14899; http://www.osvdb.org/15456
CVE: CVE-2005-1068
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in sCssBoard 1.11 and earlier allows remote attackers to execute arbitrary Javascript via [url] tags.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/14694; http://securitytracker.com/id?1013659; http://sourceforge.net/project/shownotes.php?release_id=318346
CVE: CVE-2005-1069
Published: 2005-05-02
Description: Unknown vulnerability in sCssBoard 1.11 and earlier has unknown impact, related to "an exploit on the Profile page."
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/14694; http://securitytracker.com/id?1013659; http://sourceforge.net/project/shownotes.php?release_id=318346
CVE: CVE-2005-1073
Published: 2005-05-02
Description: Directory traversal vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to read arbitrary files via the read parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14906; http://www.digitalparadox.org/advisories/rga.txt; http://www.osvdb.org/15428
CVE: CVE-2005-1074
Published: 2005-05-02
Description: SQL injection vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to execute arbitrary SQL commands via the mode parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14906; http://www.digitalparadox.org/advisories/rga.txt; http://www.osvdb.org/15429
CVE: CVE-2005-1075
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in RadScripts RadBids Gold 2 allow remote attackers to inject arbitrary web script or HTML via (1) the farea parameter to faq.php or the (2) cat, (3) order, or (4) area parameters to index.php.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/14906; http://www.digitalparadox.org/advisories/rga.txt; http://www.osvdb.org/15430
CVE: CVE-2005-1076
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in the discussion board functionality for WebCT Campus Edition 4.1 allows remote attackers to inject arbitrary web script or HTML via the message field.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/archive/1/395544; http://www.securityfocus.com/bid/13101; http://www.securityfocus.com/archive/1/395544
CVE: CVE-2005-1079
Published: 2005-05-02
Description: SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2596&w=2; http://secunia.com/advisories/14929; http://www.securiteam.com/unixfocus/5LP0G0AFFY.html
CVE: CVE-2005-1080
Published: 2005-05-02
Description: Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in filenames in a .jar file.
CVSS Score: 5.0 (MEDIUM)
References: http://advisories.mageia.org/MGASA-2015-0158.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0508&w=2; http://marc.info/?l=oss-security&m=[PII_REDACTED]8766&w=2
CVE: CVE-2005-1081
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in view.php in AzDGDatingPlatinum 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/archive/1/395530; http://www.securityfocus.com/bid/13082; https://exchange.xforce.ibmcloud.com/vulnerabilities/20052
CVE: CVE-2005-1083
Published: 2005-05-02
Description: index.php in aeDating 3.2 allows remote attackers to include arbitrary files via the skin parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14913; http://secunia.com/advisories/14913
CVE: CVE-2005-1084
Published: 2005-05-02
Description: SQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to execute arbitrary SQL commands files via the event parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14913; http://secunia.com/advisories/14913
CVE: CVE-2005-1085
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in the control panel in aeDating 3.2 allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/14913; http://secunia.com/advisories/14913
CVE: CVE-2005-1086
Published: 2005-05-02
Description: Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/14861; http://securitytracker.com/id?1013666; http://www.osvdb.org/15361