rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-3922 
Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted ZOO archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-30T11:00:00.000Z
CVE-2005-3923 
NetObjects Fusion 9 (NOF9) allows remote attackers to obtain sensitive information, including passwords, by downloading the _versioning_repository_/rollbacklog.xml file, then using it to download and modify the associated ZIP file to edit and republish the site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-30T11:00:00.000Z
CVE-2005-3924 
SQL injection vulnerability in themes/kategorie/index.php in Randshop allows remote attackers to execute arbitrary SQL commands via the (1) kategorieid and (2) katid parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-30T11:00:00.000Z
CVE-2005-3925 
Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) detail[], (2) orderdir, and (3) orderby parameters to find.php, and the (4) id parameter to issue.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-30T11:00:00.000Z
CVE-2005-3926 
Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via the _SERVER[REMOTE_ADDR] parameter, which is injected into a .inc script that is later included by the main script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-30T11:00:00.000Z
CVE-2005-3927 
Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbitrary files via (1) the meskin parameter to admin/editorTypetool.php, or the lng parameter to the in admin/inc scripts (2) archbatch.php, (3) dbbatch.php, and (4) nwlmail.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-30T11:00:00.000Z
CVE-2005-3928 
Buffer overflow in phgrafx in QNX 6.2.1 and 6.3.0 allows local users to execute arbitrary code via a long command line argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-30T11:00:00.000Z
CVE-2005-3929 
Directory traversal vulnerability in the create function in xarMLSXML2PHPBackend.php in Xaraya 1.0 allows remote attackers to create directories and overwrite arbitrary files via ".." sequences in the module parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-30T11:00:00.000Z
CVE-2005-3930 
SQL injection vulnerability in index.php in N-13 News 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3931 
SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands via the HTTP referer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3932 
SQL injection vulnerability in okiraku.php in O-Kiraku Nikki 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the day_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3933 
SQL injection vulnerability in index.php in 88Script's Event Calendar 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3934 
Buffer overflow in Symantec pcAnywhere 11.0.1, 11.5.1, and all other 32-bit versions allows remote attackers to cause a denial of service (application crash) via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3935 
SQL injection vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) node and (2) art_id parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3936 
PHP file include vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to include arbitrary local files via the __f parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3937 
SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.php, or (4) profiles.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3938 
SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the id parameter in (1) index.php, (2) faq_qanda.php, (3) refer_friend.php, (4) print_article.php, or (5) add_comment.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3939 
Multiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earler allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) perpage, (3) ascdesc, and (4) orderlinks in a displaycat action in (a) index.php; and the (5) id parameter in (b) comments.php and (c) memberlist.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3940 
SQL injection vulnerability in ringmaker.php in Orca Ringmaker 2.3c and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3941 
SQL injection vulnerability in blog.php in Orca Blog 1.3b and earlier allows remote attackers to execute arbitrary SQL commands via the msg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3942 
SQL injection vulnerability in knowledgebase-control.php in Orca Knowledgebase 2.1b and earlier allows remote attackers to execute arbitrary SQL commands via the qid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3943 
Multiple SQL injection vulnerabilities in ilyav FAQ System 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) FAQ_ID and (2) action parameters in (a) viewFAQ.php; and (3) CATEGORY_ID parameter in (b) index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3944 
SQL injection vulnerability in survey.php in ilyav Survey System 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the SURVEY_ID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3945 
The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service (CPU consumption) via a flood of SYN packets that produce identical hash values, which slows down the hash table lookups.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3946 
Opera 8.50 allows remote attackers to cause a denial of service (crash) via a Java applet with a large string argument to the removeMember JNI method for the com.opera.JSObject class.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3947 
Directory traversal vulnerability in index.php in PHP Upload Center allows remote attackers to read arbitrary files via "../" sequences in the filename parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3948 
Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the (1) cmd and (2) var1 parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3949 
Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) startid parameter to activity_log.php, (2) startid parameter to admin_handler.php, (3) template parameter to edit_template.php, and (4) multiple parameters to export_handler.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3950 
nuauth in NuFW 1.0.x before 1.0.16 and 1.1 allows authenticated users to cause a denial of service via malformed packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3951 
SQL injection vulnerability in survey.php in PHP Labs Survey Wizard allows remote attackers to execute arbitrary SQL commands via the sid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3952 
SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) type parameters to viewcat.php, or (3) certain search parameters. NOTE: later a disclosure reported the affected version as 1.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3953 
SQL injection vulnerability in Bedeng PSP 1.1 allows remote attackers to execute arbitrary SQL commands via the cwhere parameter to (1) index.php and (2) download.php, or (3) ckode parameter to baca.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3954 
Cross-site scripting (XSS) vulnerability in blogBuddies 0.3 allows remote attackers to inject arbitrary web script or HTML via the u parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3955 
Multiple cross-site scripting (XSS) vulnerabilities in MagpieRSS 7.1, as used in (a) blogBuddiesv 0.3, (b) Jaws 0.6.2, and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to (a) magpie_debug.php and (2) rss_url parameter to (b) magpie_slashbox.php and (c) simple_smarty.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3956 
Multiple SQL injection vulnerabilities in index.php in DMANews 0.904 and 0.910 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in a comments action and the (2) sortorder and (3) display_num parameters in a news_list action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3957 
Unspecified vulnerability in the Trackback functionality in DotClear 1.2.1 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3958 
SQL injection vulnerability in index.php in Entergal MX 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) idcat parameter in a showcat action and (2) the action parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3959 
Multiple cross-site scripting (XSS) vulnerabilities in FreeWebStat 1.0 rev37 allow remote attackers to inject arbitrary web script or HTML via the (1) site, (2) jsref, (3) jsres, and (4) jscolor parameters to pixel.php, which are not sanitized before being included in the logdb.html file, and (5) the search key to stat.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3960 
Kadu 0.4.2 and 0.5.0pre allows remote attackers to cause a denial of service (crash or generated traffic) via a malformed message, possibly with incomplete information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3961 
export_handler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T11:00:00.000Z
CVE-2005-3962 
Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T17:00:00.000Z
CVE-2005-3963 
SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL commands via the dc_xd parameter in a cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-02T00:00:00.000Z
CVE-2005-3964 
Multiple buffer overflows in libUil (libUil.so) in OpenMotif 2.2.3, and possibly other versions, allows attackers to execute arbitrary code via the (1) diag_issue_diagnostic function in UilDiags.c and (2) open_source_file function in UilSrcSrc.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-02T11:00:00.000Z
CVE-2005-3966 
Cross-site scripting (XSS) vulnerability in search.jsp in Java Search Engine (JSE) 0.9.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-03T19:00:00.000Z
CVE-2005-3967 
Cross-site scripting (XSS) vulnerability in the dosearchsite.action module in Atlassian Confluence 2.0.1 Build 321 allows remote attackers to inject arbitrary web script or HTML via the searchQuery.queryString search module parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-03T19:00:00.000Z
CVE-2005-3968 
SQL injection vulnerability in auth.inc.php in PHPX 3.5.9 and earlier allows remote attackers to execute arbitrary SQL commands, bypass authentication, and upload arbitrary PHP code via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-03T19:00:00.000Z
CVE-2005-3969 
SQL injection vulnerability in MXChange before 0.2.0-pre10 PL492 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-03T19:00:00.000Z
CVE-2005-3970 
Cross-site scripting (XSS) vulnerability in MXChange before 0.2.0-pre10 PL492 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-03T19:00:00.000Z
CVE-2005-3971 
Cross-site scripting (XSS) vulnerability in the login form in Citrix MetaFrame Secure Access Manager 2.0 through 2.2 and NFuse Elite 1.0 allows remote attackers to inject arbitrary web script or HTML via the username field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-03T19:00:00.000Z
CVE-2005-3972 
Cross-site scripting (XSS) vulnerability in extremesearch.php in Extreme Search Corporate Edition 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-03T19:00:00.000Z
CVE-2005-3973 
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allow remote attackers to inject arbitrary web script or HTML via various HTML tags and values, such as the (1) legend tag and the value parameter used in (2) label and (3) input tags, possibly due to an incomplete blacklist.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-03T19:00:00.000Z
CVE-2005-3974 
Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote attackers to bypass the "access user profiles" permission.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-03T19:00:00.000Z
CVE-2005-3975 
Interpretation conflict in file.inc in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF or JPEG file extension, which causes the HTML to be executed by a victim who views the file in Internet Explorer as a result of CVE-2005-3312. NOTE: it could be argued that this vulnerability is due to a design flaw in Internet Explorer and the proper fix should be in that browser; if so, then this should not be treated as a vulnerability in Drupal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-03T19:00:00.000Z
CVE-2005-3976 
SQL injection vulnerability in type.asp, as used in multiple DUware products including (1) DUamazon 3.1, (2) DUarticle 1.1, (3) DUclassified 4.2, (4) DUdirectory 3.1 and DUdirectory Pro 3.0 and 3.0 SQL, (5) DUdownload 1.1, (6) DUgallery 3.3, (7) DUnews 1.1, and (8) DUpaypal 3.1 and DUpaypal Pro 3.0, allows remote attackers to execute arbitrary SQL commands via the iType parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-03T19:00:00.000Z
CVE-2005-3977 
Cross-site scripting (XSS) vulnerability in QualityEBiz Quality PPC 1553 allows remote attackers to inject web script or HTML via the REQ parameter to the search module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-03T19:00:00.000Z
CVE-2005-3978 
Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter in (a) ViewCat.php and (b) gallery.php, and the (2) ItemNum parameter in (c) ViewItem.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-03T19:00:00.000Z
CVE-2005-3979 
relocate_server.php in Coppermine Photo Gallery (CPG) 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-03T19:00:00.000Z
CVE-2005-3980 
SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-04T11:00:00.000Z
CVE-2005-3981 
NOTE: this issue has been disputed by third parties.  Microsoft Windows XP, 2000, and 2003 allows local users to kill a writable process by using the CreateRemoteThread function with certain arguments on a process that has been opened using the OpenProcess function, possibly involving an invalid address for the start routine. NOTE: followup posts have disputed this issue, saying that if a user already has privileges to write to a process, then other functions could be called or the process could be terminated using PROCESS_TERMINATE
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-04T11:00:00.000Z
CVE-2005-3982 
CRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via the ret parameter, which is used to redirect URL requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-04T11:00:00.000Z
CVE-2005-3983 
Unknown vulnerability in the login page for HP Systems Insight Manager (SIM) 4.0 and 4.1, when accessed by Microsoft Internet Explorer with the MS04-025 patch, leads to a denial of service (browser hang). NOTE: although the advisory is vague, this issue does not appear to involve an attacker at all.  If not, then this issue is not a vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-04T11:00:00.000Z
CVE-2005-3984 
SQL injection vulnerability in WebCalendar 1.0.1 allows remote attackers to execute arbitrary SQL commands via the time_range parameter to edit_report_handler.php.  NOTE: the startid/activity_log.php vector is already covered by CVE-2005-3949.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-04T11:00:00.000Z
CVE-2005-3985 
The Internet Key Exchange version 1 (IKEv1) implementation in Astaro Security Linux before 6.102 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-04T22:00:00.000Z
CVE-2005-3986 
Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter in portfolio.php and (2) cid parameter in content.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-04T22:00:00.000Z
CVE-2005-3987 
Multiple SQL injection vulnerabilities in Tradesoft CMS allow remote attackers to execute arbitrary SQL commands via unspecified attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-04T22:00:00.000Z
CVE-2005-3988 
SQL injection vulnerability in article.php in Pineapple Technologies Lore 1.5.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-04T22:00:00.000Z
CVE-2005-3989 
Memory leak in Avaya TN2602AP IP Media Resource 320 circuit pack before vintage 9 firmware allows remote attackers to cause a denial of service (memory consumption) via crafted VoIP packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-04T22:00:00.000Z
CVE-2005-3991 
Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web script or HTML via the medium parameter to (1) start_page.css.php and (2) style.css.php; or the From parameter to users_popupL.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-04T23:00:00.000Z
CVE-2005-3992 
Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote attackers to execute arbitrary code via (1) a long GET request to the HTTP server, or a long (2) USER or (3) PASS command to the FTP server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-04T23:00:00.000Z