rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-3292 
Multiple cross-site scripting (XSS) vulnerabilities in Xeobook 0.93 allow remote attackers to inject arbitrary web script or HTML via Javascript events in tages such as <b>.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3293 
Xerver 4.17 allows remote attackers to (1) obtain source code of scripts via a request with a trailing "." (dot) or (2) list directory contents via a trailing null character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3294 
Typsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote attackers to cause a denial of service (crash) by sending multiple RETR commands.  NOTE: it was later reported that 1.10 is also affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3295 
Unspecified vulnerability in HP-UX B.11.23 on Itanium platforms allows local users to cause a denial of service due to a "specific stack size."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3296 
The FTP server in HP-UX 10.20, B.11.00, and B.11.11, allows remote attackers to list arbitrary directories as root by running the LIST command before logging in.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3297 
Multiple integer overflows in OpenWBEM on SuSE Linux 9 allow remote attackers to execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3298 
Multiple buffer overflows in OpenWBEM on SuSE Linux 9 allow remote attackers to execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3299 
PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $__redirect parameter, possibly involving the subform array.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3300 
The register_globals emulation layer in grab_globals.php for phpMyAdmin before 2.6.4-pl3 does not perform safety checks on values in the _FILES array for uploaded files, which allows remote attackers to include arbitrary files by using direct requests to library scripts that do not use grab_globals.php, then modifying certain configuration values for the theme.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3301 
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl3 allow remote attackers to inject arbitrary web script or HTML via certain arguments to (1) left.php, (2) queryframe.php, or (3) server_databases.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-24T04:00:00.000Z
CVE-2005-3302 
Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-24T04:00:00.000Z
CVE-2005-3303 
The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-05T11:00:00.000Z
CVE-2005-3304 
Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitrary PHP code via (1) the username parameter in the Your Account page, (2) the url parameter in the Downloads module, and (3) the description parameter in the Web_Links module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-25T04:00:00.000Z
CVE-2005-3305 
Multiple SQL injection vulnerabilities in Nuked Klan 1.7 allow remote attackers to execute arbitrary SQL commands via the (1) forum_id or (2) thread_id parameter in the Forum file, (3) the link_id in the Links file, (4) the artid parameter in the Sections file, and (5) the dl_id parameter in the Download file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-25T04:00:00.000Z
CVE-2005-3306 
Cross-site scripting (XSS) vulnerability in index.php for FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the user parameter in a profile operation, a different vulnerability than CVE-2005-2814.  NOTE: it is possible that this XSS is a resultant vulnerability of CVE-2005-3307.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-25T04:00:00.000Z
CVE-2005-3307 
Directory traversal vulnerability in index.php for FlatNuke 2.5.6 allows remote attackers to read arbitrary files via ".." sequences in the (1) user parameter in a profile operation or (2) quale parameter in a newtopic operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-25T04:00:00.000Z
CVE-2005-3308 
Multiple cross-site scripting (XSS) vulnerabilities in Zomplog 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) comment parameter in detail.php, (3) the username parameter in get.php, and (4) the search parameter in index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-25T04:00:00.000Z
CVE-2005-3309 
Multiple SQL injection vulnerabilities in Zomplog 3.4 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in detail.php and the catid parameter in (2) get.php and (3) index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-25T04:00:00.000Z
CVE-2005-3310 
Interpretation conflict in phpBB 2.0.17, with remote avatars and avatar uploading enabled, allows remote authenticated users to inject arbitrary web script or HTML via an HTML file with a GIF or JPEG file extension, which causes the HTML to be executed by a victim who views the file in Internet Explorer, which renders malformed image types as HTML, enabling cross-site scripting (XSS) attacks.  NOTE: it could be argued that this vulnerability is due to a design flaw in Internet Explorer (CVE-2005-3312) and the proper fix should be in that browser; if so, then this should not be treated as a vulnerability in phpBB.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-25T04:00:00.000Z
CVE-2005-3311 
BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-25T04:00:00.000Z
CVE-2005-3312 
The HTML rendering engine in Microsoft Internet Explorer 6.0 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML in corrupted images and other files such as .GIF, JPG, and WAV, which is rendered as HTML when the user clicks on the link, even though the web server response and file extension indicate that it should be treated as a different file type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-26T04:00:00.000Z
CVE-2005-3313 
The IRC protocol dissector in Ethereal 0.10.13 allows remote attackers to cause a denial of service (infinite loop).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-01T11:00:00.000Z
CVE-2005-3314 
Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via "long verb arguments."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T22:00:00.000Z
CVE-2005-3315 
Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (2) SearchText, (3) StatusFilter, and (4) computerFilter parameters to reports/default.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-30T20:00:00.000Z
CVE-2005-3316 
The installation of ON Symantec Discovery 4.5.x and Symantec Discovery 6.0 creates the (1) DiscoveryWeb and (2) DiscoveryRO database accounts with null passwords, which could allow attackers to gain privileges or prevent Discovery from running by setting another password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3317 
Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allow remote attackers to execute arbitrary code via (1) a ZIP archive that contains a file with a long filename, which is not properly handled by (a) zipgenius.exe, (b) zg.exe, (c) zgtips.dll, and (d) contmenu.dll; (2) a long original name in a (a) UUE, (b) XXE, or (c) MIM file, which is not properly handled by zipgenius.exe; or (3) an ACE archive with a file with a long filename, which is not properly handled by unacev2.dll.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3318 
Buffer overflow in the _chm_decompress_block function in CHM lib (chmlib) before 0.37, as used in products such as KchmViewer, allows attackers to execute arbitrary code, a different vulnerability than CVE-2005-2930.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3319 
The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 final and 4.4 before 4.4.1 final allows attackers to cause a denial of service (segmentation fault) via the session.save_path option in a .htaccess file or VirtualHost.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3320 
Cross-site scripting (XSS) vulnerability in SiteTurn Domain Manager Pro allows remote attackers to inject arbitrary web script or HTML via the err parameter in the panel script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3321 
chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by creating a hardlink to a file from a world-writable directory, which can cause the link count to drop to 1 when the file is deleted or replaced, which is then modified by chkstat to use weaker permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3322 
Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of service (crash) via HTTPs (SSL).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3323 
docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3324 
SQL injection vulnerability in chat.php in MWChat 6.8 allows remote attackers to execute arbitrary SQL commands via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3325 
Multiple SQL injection vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 and (2) base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.2, and unspecified other console scripts in these products, allow remote attackers to execute arbitrary SQL commands via the sig[1] parameter and possibly other parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3326 
SQL injection vulnerability in usercp.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the awayday parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3327 
Network Appliance Data ONTAP 7.0 and earlier allows iSCSI Initiators to bypass iSCSI authentication via a modified client that skips the Security (Start) mode, as required by the Login Negotiation protocol, and uses Operational mode without proving identity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3328 
PHP remote file inclusion vulnerability in common.php in PunBB 1.1.2 through 1.1.5 allows remote attackers to execute arbitrary code via the pun_root parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3329 
Cross-site scripting (XSS) vulnerability in RSA Authentication Agent for Web 5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the image parameter in a GetPic operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3330 
The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3331 
viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3332 
PHP remote file include vulnerability in admin/define.inc.php in Belchior Foundry vCard 2.9 allows remote attackers to execute arbitrary PHP code via the match parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3333 
SQL injection vulnerability in eBASEweb 3.0 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3334 
Cross-site scripting (XSS) vulnerability in index.php in Flyspray 0.9.7 through 0.9.8 (devel) allows remote attackers to inject arbitrary web script or HTML via the (1) PHPSESSID, (2) task, (3) string, (4) type, (5) serv, (6) due, (7) dev, and (8) sort2 parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3335 
PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the t_core_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3336 
SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3337 
Multiple cross-site scripting (XSS) vulnerabilities in Mantis before 0.19.3 allow remote attackers to inject arbitrary web script or HTML via (1) unknown vectors involving Javascript and (2) mantis/view_all_set.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3338 
Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3339 
Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3340 
The tuxpaint-import.sh script in Tux Paint (tuxpaint) 0.9.14 and earlier creates temporary files insecurely, with unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-19T01:00:00.000Z
CVE-2005-3341 
DHIS tools DNS package (dhis-tools-dns) before 5.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files created by (1) register-q.sh and (2) register-p.sh.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-27T23:00:00.000Z
CVE-2005-3342 
noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in (1) lib/toascii.nw and (2) shell/roff.mm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-02-14T20:00:00.000Z
CVE-2005-3343 
tkdiff before 4.1.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-27T23:00:00.000Z
CVE-2005-3344 
The default installation of Horde 3.0.4 contains an administrative account with a blank password, which allows remote attackers to gain access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T07:37:00.000Z
CVE-2005-3345 
rssh 2.0.0 through 2.2.3 allows local users to bypass access restrictions and gain root privileges by using the rssh_chroot_helper command to chroot to an external directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-28T22:00:00.000Z
CVE-2005-3346 
Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbitrary environment variables, such as LD_PRELOAD, via pathname arguments of the form "$VAR/EVAR=arg", which cause the EVAR portion to be appended to a buffer returned by a getenv function call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-20T21:00:00.000Z
CVE-2005-3347 
Multiple directory traversal vulnerabilities in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egrouwpware before 1.0.0.009, allow remote attackers to include arbitrary files via .. (dot dot) sequences in the (1) sensor_program parameter or the (2) _SERVER[HTTP_ACCEPT_LANGUAGE] parameter, which overwrites an internal variable, a variant of CVE-2003-0536.  NOTE: due to a typo in an advisory, an issue in osh was inadvertently linked to this identifier; the proper identifier for the osh issue is CVE-2005-3346.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T02:00:00.000Z
CVE-2005-3348 
HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T02:00:00.000Z
CVE-2005-3349 
GNU Gnump3d before 2.9.8 allows local users to modify or delete arbitrary files via a symlink attack on the index.lok temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T22:00:00.000Z
CVE-2005-3350 
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-04T00:00:00.000Z
CVE-2005-3351 
SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients ("To" addresses), which triggers a bus error in Perl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-20T21:00:00.000Z
CVE-2005-3352 
Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-13T20:00:00.000Z
CVE-2005-3353 
The exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service (infinite loop) via a malformed JPEG image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T23:00:00.000Z
CVE-2005-3354 
Stack-based buffer overflow in the ldif_get_line function in ldif.c of Sylpheed before 2.1.6 allows user-assisted attackers to execute arbitrary code by having local users import LDIF files with long lines.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-20T21:00:00.000Z
CVE-2005-3355 
Directory traversal vulnerability in GNU Gnump3d before 2.9.8 has unknown impact via "CGI parameters, and cookie values".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T22:00:00.000Z
CVE-2005-3356 
The mq_open system call in Linux kernel 2.6.9, in certain situations, can decrement a counter twice ("double decrement") as a result of multiple calls to the mntput function when the dentry_open function call fails, which allows local users to cause a denial of service (panic) via unspecified attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-23T22:00:00.000Z
CVE-2005-3357 
mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service (application crash) via a non-SSL request to an SSL port, which triggers a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-06T23:00:00.000Z
CVE-2005-3358 
Linux kernel before 2.6.15 allows local users to cause a denial of service (panic) via a set_mempolicy call with a 0 bitmask, which causes a panic when a page fault occurs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T19:00:00.000Z
CVE-2005-3359 
The atm module in Linux kernel 2.6 before 2.6.14 allows local users to cause a denial of service (panic) via certain socket calls that produce inconsistent reference counts for loadable protocol modules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-02T01:00:00.000Z
CVE-2005-3360 
The installation of Trend Micro PC-Cillin Internet Security 2005 12.00 build 1244, and probably previous versions, uses insecure default ACLs, which allows local users to cause a denial of service (disabled service) and gain system privileges by modifying or moving critical program files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T20:00:00.000Z
CVE-2005-3361 
Cross-site scripting (XSS) vulnerability in forum/index.php in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the nome parameter in a login operation, a variant of CVE-2005-3306.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-29T02:22:00.000Z