rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-4298 
Cross-site scripting (XSS) vulnerability in atl.cgi in AtlantForum 4.02 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) sch_allsubct, (2) before, and (3) ct parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T23:00:00.000Z
CVE-2005-4299 
Cross-site scripting (XSS) vulnerability in atl.cgi in Atlant Pro 4.02 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) before and (2) ct parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T23:00:00.000Z
CVE-2005-4300 
Format string vulnerability in the lire_pop function in pop.c in libremail 1.1.0 and earlier, with compiled with the debug option, allows remote attackers to execute arbitrary code via a crafted e-mail or POP server response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T23:00:00.000Z
CVE-2005-4301 
Cross-site scripting (XSS) vulnerability in phpXplorer 0.9.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the address bar field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T23:00:00.000Z
CVE-2005-4302 
Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to include arbitrary local files via ".."  sequences in the p parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T00:00:00.000Z
CVE-2005-4303 
SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the db_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T00:00:00.000Z
CVE-2005-4304 
index.php in ezDatabase 2.1.2 and earlier allows remote attackers to obtain sensitive information via an invalid cat_id parameter, which leaks the full pathname in an error message.  NOTE: these details are uncertain because the original report has terminology problems and lack of relevant details.  The description is based partially on feedback comments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T00:00:00.000Z
CVE-2005-4305 
Cross-site scripting (XSS) vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T00:00:00.000Z
CVE-2005-4306 
Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) pg, (2) tid, (3) cid, and (4) fid parameters to netboardr.cgi, or (5) cid parameter to search.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T00:00:00.000Z
CVE-2005-4307 
Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter to (1) forum.cgi and (2) post.cgi, or (3) the user parameter to profile.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T00:00:00.000Z
CVE-2005-4308 
index.php in ezUpload Pro 2.2 and earlier allows remote attackers to include files via the mode parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T00:00:00.000Z
CVE-2005-4309 
SQL injection vulnerability in ezUpload Pro 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T00:00:00.000Z
CVE-2005-4310 
SSH Tectia Server 5.0.0 (A, F, and T), when allowing host-based authentication only, allows users to log in with the wrong credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T00:00:00.000Z
CVE-2005-4311 
Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via (1) the page parameter in dcboard.php and (2) unspecified search parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T00:00:00.000Z
CVE-2005-4312 
SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds 5.02 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T00:00:00.000Z
CVE-2005-4313 
SQL injection vulnerability in index.php in AlmondSoft Almond Personals 4.05 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T00:00:00.000Z
CVE-2005-4314 
Cross-site scripting (XSS) vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) stop and (2) user parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T00:00:00.000Z
CVE-2005-4315 
SQL injection vulnerability in the search function in Plexum PLEXCART X3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly involving the (1) s_itemname and (2) s_orderby parameters to plexcart.pl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T00:00:00.000Z
CVE-2005-4316 
HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4317 
Limbo CMS 1.0.4.2 and earlier, with register_globals off, does not protect the $_SERVER variable from external modification, which allows remote attackers to use the _SERVER[REMOTE_ADDR] parameter to (1) conduct cross-site scripting (XSS) attacks in the stats module or (2) execute arbitrary code via an eval injection attack in the wrapper option in index2.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4318 
SQL injection vulnerability in index.php in Limbo CMS 1.0.4.2 and earlier, with register_globals off, allows remote attackers to execute arbitrary SQL commands via the _SERVER[REMOTE_ADDR] parameter, which modifies the underlying $_SERVER variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4319 
Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arbitrary PHP files via ".." sequences in the option parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4320 
Limbo CMS 1.0.4.2 and earlier allows remote attackers to obtain the installation path of the application via a direct request to (1) doc.inc.php, (2) element.inc.php, and (3) node.inc.php, which leaks the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4321 
The Internet Key Exchange version 1 (IKEv1) implementation in Apani Networks EpiForce 1.9 and earlier running IPSec, allow remote attackers to cause a denial of service (crash) via certain IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4322 
Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web Client 07-00 through 07-10-/A allow remote attackers to inject arbitrary web script or HTML via the (1) Schedule and (2) Calendar components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4323 
Unspecified vulnerability in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web Client 07-00 through 07-10-/A allow remote attackers to cause a denial of service of unspecified impact via repeated invalid requests to the Schedule component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4324 
Hitachi Groupmax Mail SMTP 06-50 through 06-52-/A and 07-00 through 07-20 allows remote attackers to cause a denial of service (service stop) via an e-mail message with an "invalid format."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4325 
Multiple unspecified vulnerabilities in Driverse before 0.56b have unknown impact and attack vectors, related to (1) a "ptrace exploit" and (2) "some other potential security problems."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4326 
The web interface for American Power Conversion (APC) PowerChute Network Shutdown performs all communication in cleartext (base64-encoded), which allows remote attackers to sniff authentication credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4327 
Multiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject arbitrary web script or HTML via the (1) function, (2) year, and (3) date parameters to webcal.cgi, (4) new calendar entries, and (5) notes for entries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4328 
Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the ID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4329 
SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) newsid and (2) id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4330 
SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL commands via the (1) id, (2) store, and (3) step parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4331 
SQL injection vulnerability in merchant.ihtml in iHTML Merchant Version 2 Pro allows remote attackers to execute arbitrary SQL commands via the (1) step, (2) id, and (3) pid parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4332 
Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service or upload files via direct requests to obsolete JSP files including (1) admin/uploadclient.jsp, (2) apply_firmware_action.jsp, and (3) file.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4333 
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) inreplyto, (2) article, and (3) board parameters to reply.pl, (4) branch, (5) board, and (6) stats.pl parameters to (b) stats.pl, and (7) board parameter to (c) toc.pl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4334 
SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the H_ID parameter to (1) zixforum/forum.asp, as used in (2) Headforums.asp and (3) Subject.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4335 
ProjectForum 4.7.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted pageid parameter to admin/versions.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4336 
Cross-site scripting (XSS) vulnerability in ProjectForum 4.7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) fwd parameter in admin/adminsignin.html and (2) originalpageid parameter in admin/newpage.html associated with a group.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T11:00:00.000Z
CVE-2005-4337 
The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified user_id parameter and a "/" in the encoded_pw parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T21:00:00.000Z
CVE-2005-4338 
announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to gain administrator privileges by setting the context parameter to "admin".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T21:00:00.000Z
CVE-2005-4339 
Cross-site scripting (XSS) vulnerability in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to inject arbitrary web script or HTML via the context parameter to announcement.pl, which is reflected in the resulting page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T21:00:00.000Z
CVE-2005-4341 
Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to list all available categories via a blank category_id parameter to category.pl.  NOTE: it is not clear whether this information is sensitive or not, so this might not be an exposure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T21:00:00.000Z
CVE-2005-4342 
ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the SecurityManager is disabled, which might allow remote attackers to "bypass security controls," aka "JRun Clustered Sandbox Security Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T23:00:00.000Z
CVE-2005-4343 
Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka "CFMAIL injection Vulnerability".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T23:00:00.000Z
CVE-2005-4344 
Adobe (formerly Macromedia) ColdFusion MX 7.0 does not honor when the CFOBJECT /CreateObject(Java) setting is disabled, which allows local users to create an object despite the specified configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T23:00:00.000Z
CVE-2005-4345 
Adobe (formerly Macromedia) ColdFusion MX 7.0 exposes the password hash of the Administrator in an API call, which allows local developers to obtain the hash and gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-17T23:00:00.000Z
CVE-2005-4346 
Invalid SQL syntax error in blog.php in phpBB Blog 2.2.2 and earlier allows remote attackers to obtain the full path of the application via an invalid permalink parameter to index.php, which produces an invalid SQL query that leaks the full pathname in a SQL syntax error message. NOTE: this was originally claimed to be SQL injection, but a cleansing step strips all non-digit characters and leaves an empty permalink argument, which leads to the syntax error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-18T22:00:00.000Z
CVE-2005-4347 
The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the "chroot barrier" with util-vserver, which allows attackers to access files on the host system that are outside of the vserver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-22T11:00:00.000Z
CVE-2005-4348 
fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-21T00:00:00.000Z
CVE-2005-4349 
SQL injection vulnerability in server_privileges.php in phpMyAdmin 2.7.0 allows remote authenticated users to execute arbitrary SQL commands via the (1) dbname and (2) checkprivs parameters.  NOTE: the vendor and a third party have disputed this issue, saying that the main task of the program is to support query execution by authenticated users, and no external attack scenario exists without an auto-login configuration.  Thus it is likely that this issue will be REJECTED.  However, a closely related CSRF issue has been assigned CVE-2005-4450
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-19T11:00:00.000Z
CVE-2005-4350 
Unspecified vulnerability in WBEM Services A.01.x before A.01.05.12 and A.02.x before A.02.00.08 on HP-UX B.11.00 through B.11.23 allows remote attackers to cause an unspecified denial of service via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T00:00:00.000Z
CVE-2005-4351 
The securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1.2, and Linux up to 2.6.15 allows root users to bypass immutable settings for files by mounting another filesystem that masks the immutable files while the system is running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-09T20:00:00.000Z
CVE-2005-4352 
The securelevels implementation in NetBSD 2.1 and earlier, and Linux 2.6.15 and earlier, allows local users to bypass time setting restrictions and set the clock backwards by setting the clock ahead to the maximum unixtime value (19 Jan 2038), which then wraps around to the minimum value (13 Dec 1901), which can then be set ahead to the desired time, aka "settimeofday() time wrap."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-09T20:00:00.000Z
CVE-2005-4353 
SQL injection vulnerability in index.php in toendaCMS 0.6.2.1, when configured to use a SQL database, allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T00:00:00.000Z
CVE-2005-4354 
Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T01:00:00.000Z
CVE-2005-4355 
Multiple cross-site scripting (XSS) vulnerabilities in UStore allow remote attackers to inject arbitrary web script or HTML via the (1) Cat parameter in default.asp and the (2) accessdenied parameter in admin/default.asp.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T01:00:00.000Z
CVE-2005-4356 
SQL injection vulnerability in UStore allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T01:00:00.000Z
CVE-2005-4357 
Cross-site scripting (XSS) vulnerability in phpBB 2.0.18, when "Allowed HTML tags" is enabled, allows remote attackers to inject arbitrary Javascript via a permitted HTML tag with " (quote) characters and active attributes such as onmouseover.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T01:00:00.000Z
CVE-2005-4358 
admin/admin_disallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path via a direct request with a non-empty setmodules parameter, which causes an invalid append_sid function call that leaks the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T01:00:00.000Z
CVE-2005-4359 
SQL injection vulnerability in includes/core.inc.php in ODFaq 2.1.0 allows remote attackers to execute arbitrary SQL commands via the (1) cat and (2) srcText parameters to faq.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T01:00:00.000Z
CVE-2005-4360 
The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "~0" through "~9", which causes ntdll.dll to produce a return value that is not correctly handled by IIS, as demonstrated using "/_vti_bin/.dll/*/~0".  NOTE: the consequence was originally believed to be only a denial of service (application crash and reboot).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T01:00:00.000Z
CVE-2005-4361 
Cross-site scripting (XSS) vulnerability in search.html in Magnolia Content Management Suite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T01:00:00.000Z
CVE-2005-4362 
SQL injection vulnerability in page.php in Komodo CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T01:00:00.000Z
CVE-2005-4363 
Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T01:00:00.000Z
CVE-2005-4364 
Cross-site scripting (XSS) vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-20T01:00:00.000Z