rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-4365 
Multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter in text.php and (2) frame parameter in forum.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T01:00:00.000Z
CVE-2005-4366 
Multiple SQL injection vulnerabilities in DRZES HMS 3.2 allow remote attackers to execute arbitrary SQL commands via the (1) plan_id parameter to (a) domains.php, (b) viewusage.php, (c) pop_accounts.php, (d) databases.php, (e) ftp_users.php, (f) crons.php, (g) pass_dirs.php, (h) zone_files.php, (i) htaccess.php, and (j) software.php; (2) the customerPlanID parameter to viewplan.php; (3) the ref_id parameter to referred_plans.php; (4) customerPlanID parameter to listcharges.php; and (5) the domain parameter to (k) pop_accounts.php, (d) databases.php, (e) ftp_users.php, (f) crons.php, (g) pass_dirs.php, (h) zone_files.php, (i) htaccess.php, and (j) software.php.  NOTE: the viewinvoice.php invoiceID vector is already covered by CVE-2005-4137.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T01:00:00.000Z
CVE-2005-4367 
Cross-site scripting (XSS) vulnerability in register_domain.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the "Domain Availability" field.  NOTE: this issue was later reported to affect CONTROLzx (renamed from DRZES) 3.3.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T01:00:00.000Z
CVE-2005-4368 
roundcube webmail Alpha, with a default high verbose level ($rcmail_config['debug_level'] = 1), allows remote attackers to obtain the full path of the application via an invalid_task parameter, which leaks the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4369 
Cross-site scripting (XSS) vulnerability in Acuity CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly strSearchKeywords to browse.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4370 
SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter to default.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4371 
Acidcat 2.1.13 and earlier stores the database under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a request to databases/acidcat.mdb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4372 
Cross-site scripting (XSS) vulnerability in account.html in Adaptive Website Framework (AWF) 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4373 
Adaptive Website Framework (AWF) 2.10 and earlier allows remote attackers to obtain the full path of the application via an invalid mode parameter to community.html, which leaks the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4374 
Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) s parameter to faq.asp and (2) searchQuery parameter to search.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4375 
Cross-site scripting (XSS) vulnerability in Amaxus 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the change parameter.  NOTE: it is possible that this is resultant from CVE-2005-4376.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4376 
Directory traversal vulnerability in Amaxus 3 and earlier allows remote attackers to access arbitrary files via ".." sequences in the change parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4377 
Cross-site scripting (XSS) vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) PageID and (2) SiteNodeID parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4378 
SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4379 
Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to inject arbitrary web script or HTML via the (1) sort_mode parameter to (a) fisheye/list_galleries.php, (b) messages/message_box.php, and (c) users/my.php; the (2) post_id parameter to (d) blogs/view_post.php; the (3) blog_id parameter to (e) blogs/view.php; and the (4) search field to (f) users/my_groups.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4380 
Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL commands via the (1) sort_mode parameter to (a) fisheye/list_galleries.php, (b) messages/message_box.php, and (c) users/my.php; the (2) post_id parameter to (d) blogs/view_post.php; and the (3) blog_id parameter to (e) blogs/view.php, which are not properly cleansed by the convert_sortmode function in kernel/BitDb.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4381 
Multiple cross-site scripting (XSS) vulnerabilities in Caravel CMS 3.0 Beta 1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) fileDN and (2) folderviewer_attrs parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4382 
SQL injection vulnerability in CitySoft Community Enterprise 4.x allows remote attackers to execute arbitrary SQL commands via the (1) nodeID, (2) pageID, (3) ID, and (4) parentid parameter to index.cfm; and (5) documentFormatId parameter to document/docWindow.cfm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4383 
Cross-site scripting (XSS) vulnerability in index.cfm in CitySoft Community Enterprise 4.x allows remote attackers to inject arbitrary web script or HTML via the (1) presentationSite, (2) docPublishYear, (3) docDescription, (4) publishState, (5) docAuthor, (6) docTitle, (7) subTopic, (8) topic, (9) topicRadio, (10) topicOnly, (11) startrow, and (12) sortby parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4384 
CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid (1) fuseaction parameter to index.cfm and (2) documentid parameter to document/docWindow.cfm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4385 
Cross-site scripting (XSS) vulnerability in search.htm in Cofax 2.0 RC3 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4386 
Cross-site scripting (XSS) vulnerability in Colony CMS 2.75 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4387 
Cross-site scripting (XSS) vulnerability in home.php in contenite 0.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4388 
Cross-site scripting (XSS) vulnerability in search.cfm in CONTENS 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the near parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4389 
search.cfm in CONTENS 3.0 and earlier allows remote attackers to obtain the full server path via invalid (1) submit.y, (2) bool, (3) itemsperpage, (4) submit, (5) submit.x, (6) criteria, (7) advanced, and (8) intern parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T02:00:00.000Z
CVE-2005-4390 
SQL injection vulnerability in index.php in ContentServ 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the StoryID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4391 
Cross-site scripting (XSS) vulnerability in damoon allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the q parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4392 
SQL injection vulnerability in printer_friendly.cfm in e-publish CMS 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4393 
Cross-site scripting (XSS) vulnerability in show.cfm in e-publish CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) obcatid and (2) comid parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4394 
Cross-site scripting (XSS) vulnerability in EPiX 3.1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search query parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4395 
Cross-site scripting (XSS) vulnerability in FarCry 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the criteria parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4396 
Cross-site scripting (XSS) vulnerability in admin/Default.asp in iCMS allows remote attackers to inject arbitrary web script or HTML via the LoginMSG parameter.  NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4397 
SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute arbitrary SQL commands via the Event_ID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4398 
NOTE: the vendor has disputed this issue.  Cross-site scripting (XSS) vulnerability in lemoon 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the q parameter.  NOTE: the vendor has disputed this issue, saying "Sites are built on top of ASP.NET and you use lemoon core objects to easily manage and render content. The XSS vuln. you are referring to exists in one of our public sites built on lemoon i.e. a custom made site (as all sites are). The problem exists in a UserControl that handles form input and is in no way related to the lemoon core product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4399 
Cross-site scripting (XSS) vulnerability in search/index.php in Libertas Enterprise CMS 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page_search parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4400 
Cross-site scripting (XSS) vulnerability in downloads/portal_ent in Liferay Portal Enterprise 3.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) _77_struts_action, (2) p_p_mode, and (3) p_p_state parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4401 
Cross-site scripting (XSS) vulnerability in Lutece 1.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the query parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4402 
Buffer overflow in MailEnable Professional 1.71 and earlier, and Enterprise 1.1 and earlier, allows remote authenticated users to execute arbitrary code via a long IMAP EXAMINE command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4403 
SQL injection vulnerability in index.php in Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the show parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4404 
SQL injection vulnerability in default.asp in Media2 CMS Shop 18.x allows remote attackers to execute arbitrary SQL commands via the item parameter.  NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4405 
redqueen.cgi in Red Queen 1.02 and earlier allows remote attackers to obtain the full server path via invalid (1) yellowpage_id, (2) skin_id, (3) supplier_id, and (4) module parameters, which leaks the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4406 
SQL injection vulnerability in index.cfm in Mercury CMS 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4407 
Cross-site scripting (XSS) vulnerability in index.cfm in Mercury CMS 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) content and (2) criteria parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4408 
Multiple SQL injection vulnerabilities in Miraserver 1.0 RC4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php, (2) id parameter to newsitem.php, and (3) cat parameter to article.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4409 
Cross-site scripting (XSS) vulnerability in MMBase 1.7.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4410 
Cross-site scripting (XSS) vulnerability in NQcontent 3 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the text parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4411 
Buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via a long request to TCP port 105.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4412 
Citrix Program Neighborhood client before 9.150 caches the user password in plaintext in the GUI while asterisks are used to visually obfuscate the password, which allows attackers with access to the session to obtain the password by using a tool to directly access the field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4413 
Multiple cross-site scripting (XSS) vulnerabilities in sample scripts in IBM WebSphere Application Server 6 allow remote attackers to inject arbitrary web script or HTML via the (1) E-mail address field to (a) PlantsByWebSphere/login.jsp, (2) message field to (b) TechnologySample/BulletinBoard Script, (3) Email address field to (c) TechnologySamples/Subscription, and the (4) Movie Name, (5) Movie Reviewer, and (6) Movie Review fields to (d) TechnologySamples/MovieReview2_1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4414 
Unspecified vulnerability in Teamwork 3 before alpha 1.7 has unknown impact and attack vectors, related to "a menu security bug."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4415 
Cross-site scripting (XSS) vulnerability in index.php in TML CMS 0.5 allows remote attackers to inject arbitrary web script or HTML via the form parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4416 
SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4417 
The default configuration of Widcomm Bluetooth for Windows (BTW) 4.0.1.1500 and earlier, as installed on Belkin Bluetooth Software 1.4.2 Build 10 and ANYCOM Blue USB-130-250 Software 4.0.1.1500, and possibly other devices, sets null Authentication and Authorization values, which allows remote attackers to send arbitrary audio and possibly eavesdrop using the microphone via the Hands Free Audio Gateway and Headset profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4418 
util-vserver before 0.30.208-1 with kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux sets a default policy that trusts unknown capabilities, which could allow local users to conduct unauthorized activities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-22T11:00:00.000Z
CVE-2005-4419 
Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) series, (2) cat_parent, (3) cat, and (4) div parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4420 
Cross-site scripting (XSS) vulnerability in Honeycomb Archive Enterprise 3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the keyword parameter in search.cfm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4421 
Dev-Editor 3.0 allows remote attackers to access any directory outside the web root whose name is a substring of the web root directory name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4422 
Unrestricted file upload vulnerability in toendaCMS before 0.6.2 Stable allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in data/images/albums.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4423 
Unrestricted file upload vulnerability in PHPFM before 0.2.3 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension to an accessible directory, as demonstrated using a file with a .php extension, aka "upload phpshell."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4424 
Directory traversal vulnerability in PHPKIT 1.6.1 R2 and earlier might allow remote authenticated users to execute arbitrary PHP code via a .. (dot dot) in the path parameter and a %00 at the end of the filename, as demonstrated by an avatar filename ending with .png%00.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4425 
Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to cause a denial of service (crash) via certain RTSP streams.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4426 
Interpretation conflict in YaBB before 2.1 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF file extension, which causes the HTML to be executed by a victim who views the file in Internet Explorer as a result of CVE-2005-3312. NOTE: it could be argued that this vulnerability is due to a design flaw in Internet Explorer and the proper fix should be in that browser; if so, then this should not be treated as a vulnerability in YaBB.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T11:00:00.000Z
CVE-2005-4427 
Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to attachment_send.php, (2) the $addy variable in email_parser.php, (3) $address variable in email_parser.php, (4) $a_address variable in structs.php, (5) kbid parameter to cer_KnowledgebaseHandler.class.php, (6) queues[] parameter to addresses_export.php, (7) $thread variable to display.php, (8) ticket parameter to display_ticket_thread.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T23:00:00.000Z
CVE-2005-4428 
Cross-site scripting (XSS) vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML via the kb_ask parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T23:00:00.000Z
CVE-2005-4429 
SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) sort_by and (2) sort_order parameters to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-21T00:00:00.000Z
CVE-2005-4430 
SQL injection vulnerability in LogicBill 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) __mode and (2) __id parameters to helpdesk.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-21T00:00:00.000Z