rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-2781 
The Avatar upload feature in FUD Forum before 2.7.0 does not properly verify uploaded files, which allows remote attackers to execute arbitrary PHP code via a file with a .php extension that contains image data followed by PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-02T04:00:00.000Z
CVE-2005-2782 
PHP remote file inclusion vulnerability in al_initialize.php for AutoLinks Pro 2.1 allows remote attackers to execute arbitrary PHP code via an "ftp://" URL in the alpath parameter, which bypasses the incomplete blacklist that only checks for "http" and "https" URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-02T04:00:00.000Z
CVE-2005-2783 
Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.00.107 and earlier allows remote attackers to inject arbitrary web script or HTML via nested, malformed URL BBCode tags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-02T04:00:00.000Z
CVE-2005-2784 
SQL injection vulnerability in the login function for the administration login panel in cosmoshop 8.10.78 allows remote attackers to execute arbitrary SQL commands and bypass authentication via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-02T04:00:00.000Z
CVE-2005-2785 
cosmoshop 8.10.78 and earlier stores passwords in plaintext in the database, which allows local users to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-02T04:00:00.000Z
CVE-2005-2786 
Directory traversal vulnerability in bestmail_edit.cgi in cosmoshop 8.10.78 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-02T04:00:00.000Z
CVE-2005-2787 
comment_delete_cgi.php in Simple PHP Blog allows remote attackers to delete arbitrary files via the comment parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-02T04:00:00.000Z
CVE-2005-2788 
Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to (1) events.php, (2) index.php, or (3) list.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-02T04:00:00.000Z
CVE-2005-2789 
BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to bypass authentication via (1) an unknown attack vector or (2) a NULL (0x00) as a username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-02T04:00:00.000Z
CVE-2005-2790 
BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, relies on the client to enforce permissions and perform actions such as disconnections, which allows remote attackers to bypass administrative restrictions via a modified client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-02T04:00:00.000Z
CVE-2005-2791 
BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to cause a denial of service (refused new connections) via a series of connections and disconnections without sending the login command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-02T04:00:00.000Z
CVE-2005-2792 
Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the custom_welcome_page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-02T04:00:00.000Z
CVE-2005-2793 
PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute arbitrary PHP code via the custom_welcome_page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-02T04:00:00.000Z
CVE-2005-2794 
store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2796 
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2797 
OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding ("-D" option) when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-06T04:00:00.000Z
CVE-2005-2798 
sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-06T04:00:00.000Z
CVE-2005-2799 
Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execute arbitrary code via a long HTTP POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-15T04:00:00.000Z
CVE-2005-2800 
Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows local users to cause a denial of service (memory consumption) via certain repeated reads from the /proc/scsi/sg/devices file, which is not properly handled when the next() iterator returns NULL or an error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-06T04:00:00.000Z
CVE-2005-2801 
xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the name_index fields when sharing xattr blocks, which could prevent default ACLs from being applied.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-06T04:00:00.000Z
CVE-2005-2803 
Cross-site scripting (XSS) vulnerability in Hiki 0.8.1 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via a page name in a Login link, a different vulnerability than CVE-2005-2336.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-06T04:00:00.000Z
CVE-2005-2804 
Integer overflow in the registry parsing code in GroupWise 6.5.3, and possibly earlier version, allows remote attackers to cause a denial of service (application crash) via a large TCP/IP port in the Windows registry key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-04T04:00:00.000Z
CVE-2005-2805 
forum_post.php in e107 0.6 allows remote attackers to post to non-existent forums by modifying the forum number.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-06T04:00:00.000Z
CVE-2005-2806 
client.cpp in BNBT EasyTracker 7.7r3.2004.10.27 and earlier allows remote attackers to cause a denial of service (application hang) via an HTTP header containing only a ":" (colon), possibly leading to an integer signedness error due to a missing field name or value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-06T04:00:00.000Z
CVE-2005-2807 
frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, which allows local users to read portions of arbitrary files via the -f command line option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2808 
frox 0.7.16 and 0.7.17 does not properly parse certain Deny ACLs, which might allow attackers to bypass intended restrictions and access blocked hosts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2809 
silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.[PID].stats temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2810 
Multiple stack-based buffer overflows in urban before 1.5.3 allow local users to gain privileges via a long HOME environment variable to (1) config.cc, (2) game.cc, (3) highscor.cc, or (4) meny.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2811 
Untrusted search path vulnerability in Net-SNMP 5.2.1.2 and earlier, on Gentoo Linux, installs certain Perl modules with an insecure DT_RPATH, which could allow local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2812 
man2web allows remote attackers to execute arbitrary commands via -P arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2813 
Directory traversal vulnerability in FlatNuke 2.5.6 and possibly earlier allows remote attackers to read arbitrary files via ".." sequences and "%00" (trailing null byte) characters in the id parameter to the read mod in index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2814 
Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the usr parameter in a vis_reg operation to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2815 
print.php in FlatNuke 2.5.6 allows remote attackers to obtain sensitive information (path disclosure on error) or cause a denial of service (resource consumption) via an MS-DOS device name in the news parameter to print.php, such as (1) AUX, (2) CON, (3) PRN, (4) COM1, or (5) LPT1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2816 
Cross-site scripting (XSS) vulnerability in Greymatter allows remote attackers to inject arbitrary web script or HTML via a post comment, which is recorded in a log file but not properly handled when the administrator uses "View Control Panel Log" to read the log file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2817 
Simple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers to monitor sensitive information of forum visitors such as IP address and user agent, as demonstrated using a PHP script on a malicious server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2818 
Cross-site scripting (XSS) vulnerability in DownFile 1.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter to (1) email.php,(2) index.php, (3) del.php, or (4) add_form.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2819 
DownFile 1.3 allows remote attackers to gain administrator privileges via a direct request to (1) update.php, (2) del.php, and (3) add_form.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2820 
Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail message containing Internet Explorer "Conditional Comments" such as "[if]" and "[endif]".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2827 
The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify kernel memory and execution flow via steps in which a terminating thread causes Asynchronous Procedure Call (APC) entries to free the wrong data, aka the "Windows Kernel Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T01:00:00.000Z
CVE-2005-2829 
Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a file download box, then (2) using a keyboard shortcut and delaying the display of the file download box until the user hits a shortcut that activates the "Run" button, aka "File Download Dialog Box Manipulation Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-2830 
Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-2831 
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-2836 
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 5.0.17a and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to register.php or (2) a signature of a logged-in user in "My Control Center," which is not properly handled by control.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2837 
Multiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote attackers to execute arbitrary Perl code via (1) Help.pm, (2) International.pm, or (3) WebGUI.pm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2838 
SQL injection vulnerability in login.php in myBloggie 2.1.3-beta and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2839 
Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.72 allow remote attackers to inject arbitrary web script or HTML via (1) dl-search.php or (2) wl-search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2840 
Multiple unknown vulnerabilities in MAXdev MD-Pro 1.0.72 and earlier have unknown impact and unspecified attack vectors, in one or more of the (1) Download, (2) Search, (3) Web links, (4) Blocks, (5) Messages, (6) News, (7) Comments, (8) Settings, (9) Stats or (10) subjects modules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-07T04:00:00.000Z
CVE-2005-2841 
Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 and 12.3T, and 12.4 and 12.4T allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted user authentication credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2842 
Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary code via the username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2843 
Helpdesk software Hesk 0.92 does not properly verify usernames and passwords, which allows remote attackers to bypass authentication via a direct request to admin_main.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2844 
Buffer overflow in MMClient.exe in Indiatimes Messenger 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long group name argument to the RenameGroup function in the MMClient.MunduMessenger.1 ActiveX object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2845 
Ariba Spend Management System sends the username and password to the server in plaintext in a POST request, which allows remote attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2846 
PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execute arbitrary PHP code via the nls[file][vx][vxsfx] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2847 
img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2848 
Directory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2849 
Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions of source code via the -f option to Dig (dig_device.cgi), (2) determine file existence via the -r argument to Tcpdump (tcpdump_device.cgi) or (3) modify files in the cgi-bin directory via the -w argument to Tcpdump.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2850 
SlimFTPd 3.17 allows remote attackers to cause a denial of service (crash) via certain (1) USER and (2) PASS commands, possibly due to a buffer overflow or off-by-one error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2851 
smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the (1) smb4k.tmp or (2) sudoers temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2852 
Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service (ABEND) via an incorrect password length, as exploited by the "worm.rbot.ccc" worm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2853 
Multiple cross-site scripting (XSS) vulnerabilities in GuppY 4.5.3a and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the pg parameter to printfaq.php, or the (2) Referer or (3) User-Agent HTTP headers, which are not properly handled by error.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2854 
CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers to use the script as a mail relay (spam proxy) via CRLF sequences in the (1) name or (2) email fields, which are injected into mail headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2855 
Cross-site scripting (XSS) vulnerability in Unclassified NewsBoard 1.5.3 allows remote attackers to inject arbitrary web script or HTML via the description field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2856 
Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including (1) ALZip 5.51 through 6.11, (2) Servant Salamander 2.0 and 2.5 Beta 1, (3) WinHKI 1.66 and 1.67, (4) ExtractNow 3.x, (5) Total Commander 6.53, (6) Anti-Trojan 5.5.421, (7) PowerArchiver before 9.61, (8) UltimateZip 2.7,1, 3.0.3, and 3.1b, (9) Where Is It (WhereIsIt) 3.73.501, (10) FilZip 3.04, (11) IZArc 3.5 beta3, (12) Eazel 1.0, (13) Rising Antivirus 18.27.21 and earlier, (14) AutoMate 6.1.0.0, (15) BitZipper 4.1 SR-1, (16) ZipTV, and other products, allows user-assisted attackers to execute arbitrary code via a long filename in an ACE archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2857 
Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay (spam proxy).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2858 
The Fetch.FetchContact.1 ActiveX control (Fetch.dll) for Rediff Bol 7.0 allows remote attackers to read the Windows Address Book via the FullAddressBook method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2859 
Savant Web Server stores user credentials in plaintext in the Savant\Users registry key, which allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2860 
Cross-site scripting (XSS) vulnerability in Nikto 1.35 and earlier allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response header, which is directly injected into an HTML report.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2861 
Cross-site scripting (XSS) vulnerability in N-Stealth Commercial Edition before 5.8.0.38 and Free Edition before 5.8.1.03 allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response header, which is directly injected into an HTML report.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2862 
ADSL Road Runner modem in the Annex A family has a service running on port 224, which allows remote attackers to login to the modem with a blank password and gain unauthorized access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2863 
Cross-site scripting (XSS) vulnerability in openwebmail-main.pl in OpenWebMail 2.41 allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z