rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-1407 
Skype for Windows 1.2.0.0 to 1.2.0.46 allows local users to bypass the identity check for an authorized application, then call arbitrary Skype API functions by modifying or replacing that application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1408 
Apple Keynote 2.0 and 2.0.1 allows remote attackers to read arbitrary files via the keynote: URI handler in a crafted Keynote presentation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-26T04:00:00.000Z
CVE-2005-1409 
PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1410 
The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as "internal" even when they do not take an internal argument, which allows attackers to cause a denial of service (application crash) and possibly have other impacts via SQL commands that call other functions that accept internal arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1411 
Cybration ICUII 7.0 stores passwords in plaintext in the world-readable icuii.ini file, which allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1412 
SQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote attackers to execute arbitrary SQL commands via the AdminPWD parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1413 
Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the (1) username or (2) password parameters to admin_login.asp, or the (3) searchstring and possibly (4) ID parameters to default.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1414 
ExoticSoft FilePocket 1.2 stores sensitive proxy information, including proxy passwords, in plaintext in the registry, which allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1415 
Buffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote authenticated users to execute arbitrary code via a long FTP command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1416 
Directory traversal vulnerability in 04WebServer 1.81 allows remote attackers to read files outside of the web root but within the installation folder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1417 
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute arbitrary SQL commands via (1) article_popular.asp, (2) arguments to dl_popular.asp, (3) arguments to links_popular.asp, (4) arguments to pic_popular.asp, (5) article_rate.asp, (6) dl_rate.asp, (7) links_rate.asp, (8) pic_rates.asp, (9) article_toprated.asp, (10) dl_toprated.asp, (11) links_toprated.asp, (12) arguments to pic_toprated.asp, or (13) the TOPIC_ID or Forum_ID parameters to custom_link.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1418 
NetLeaf Limited NotJustBrowsing 1.0.3 stores the View Lock Password in plaintext in the notjustbrowsing.prf file, which allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1419 
SQL injection vulnerability in the admin login panel for Ocean12 Mailing List Manager 1.06 allows remote attackers to execute arbitrary SQL commands via the Admin_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1420 
Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to determine the full pathname of the server via a request for an invalid page, as demonstrated using "%20" (hex-encoded space).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1421 
Directory traversal vulnerability in Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to read arbitrary files via ".." (dot dot) sequences in an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1422 
Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to conduct administrator operations and cause a denial of service (server or camera shutdown) via a direct request to admin.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1423 
Directory traversal vulnerability in the mail program in 602LAN SUITE 2004.0.05.0413 allows remote attackers to cause a denial of service and determine the presence of arbitrary files via .. sequences in the A parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1424 
StumbleInside GoText 1.01 stores sensitive username, mail address,and phone number information in plaintext in the GoText.bin file, which allows local users to obtain that information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1425 
Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/guestbook.mdb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1426 
Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/blog.mdb (aka mdb-database/blog.msb).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1427 
Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request to uphotogallery.mdb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1428 
edit_image.asp in Uapplication Uphotogallery allows remote attackers to upload arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1429 
SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1430 
Mac OS X 10.3.x and earlier uses insecure permissions for a pseudo terminal tty (pty) that is managed by a non-setuid program, which allows local users to read or modify sessions of other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1431 
The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial of service, possibly related to padding bytes in gnutils_cipher.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1433 
Multiple unknown vulnjerabilities HP OpenView Event Correlation Services (OV ECS) 3.32 and 3.33 allow attackers to cause a denial of service or execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1434 
Multiple unknown vulnerabilities in OpenView Network Node Manager (OV NNM) 6.2, 6.4, 7.01, and 7.50 allow attackers to cause a denial of service or execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1435 
Open WebMail (OWM) before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1436 
Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter to view.php, (2) the osticket_title parameter to header.php, (3) the em parameter to admin_login.php, (4) the e parameter to user_login.php, (5) the err parameter to open_submit.php, or (6) the name and subject fields when adding a ticket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1437 
Multiple SQL injection vulnerabilities in osTicket allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to admin.php or (2) cat parameter to view.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1438 
PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to execute arbitrary PHP code via the include_dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1439 
Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via .. sequences in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1440 
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbitrary web script or HTML via (1) various parameters to basket.php, (2) the nickname, email, topic, and message fields in forum.php, as demonstrated using forum_new_thread.php and forum_thread.php, (3) the page parameter to page.php, (4) category_id and item_id parameters to reviews.php, (5) the category_id parameter to product_details.php, (6) the category_id or search_string parameters to products.php, or (7) the rp or page parameters to news_view.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1441 
Format string vulnerability in Lotus Domino 6.0.x before 6.0.5 and 6.5.x before 6.5.4 allows remote attackers to cause a denial of service via the Notes protocol (NRPC).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1442 
Buffer overflow in the Lotus Notes client for Domino 6.5 before 6.5.4 and 6.0 before 6.0.5 allows local users to cause a denial of service (client crash) and possibly execute arbitrary code via the NOTES.INI file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1443 
Multiple cross-site scripting (XSS) vulnerabilities in index.php for Invision Power Board (IPB) 2.0.3 and 2.1 Alpha 2 allows remote attackers to inject arbitrary web script or HTML via the (1) act, (2) Members, (3) calendar, or (4) HID parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1444 
Multiple cross-site scripting (XSS) vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to inject arbitrary web script or HTML via (1) the v, show, or sec_name parameters to main.php, (2) the inadmin, newsev, or postid parameters to 5.php, or (3) the id parameter to 0.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1445 
Multiple directory traversal vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to (1) delete arbitrary files via the id parameter in a rmattach action to 5.php, or (2) read arbitrary files via the lang parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1446 
SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to upload and execute arbitrary files such as PHP scripts via an attachment to a trouble ticket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1447 
PHP remote file inclusion vulnerability in main.php in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to execute arbitrary PHP code via the p parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1448 
Cross-site scripting (XSS) vulnerability in the BBCode plugin for Serendipity before 0.8 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1449 
Unknown vulnerability in serendipity_config_local.inc.php for Serendipity before 0.8 has unknown impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1450 
Unknown vulnerability in "the function used to validate path-names for uploading media" in Serendipity before 0.8 has unknown impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1451 
The media manager in Serendipity before 0.8 allows remote attackers to upload and execute arbitrary (1) .php or (2) .shtml files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1452 
Serendipity before 0.8 allows Chief users to "hide plugins installed by other users."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1453 
fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (crash) by closing the connection while fetchnews is reading (1) an article header or (2) an article body, which also prevents fetchnews from querying other servers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-05T04:00:00.000Z
CVE-2005-1454 
SQL injection vulnerability in the radius_xlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via (1) group_membership_query, (2) simul_count_query, or (3) simul_verify_query configuration entries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-19T04:00:00.000Z
CVE-2005-1455 
Buffer overflow in the sql_escape_func function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote attackers to cause a denial of service (crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-19T04:00:00.000Z
CVE-2005-1456 
Multiple unknown vulnerabilities in the (1) DHCP and (2) Telnet dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (abort).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-05T04:00:00.000Z
CVE-2005-1457 
Multiple unknown vulnerabilities in the (1) AIM, (2) LDAP, (3) FibreChannel, (4) GSM_MAP, (5) SRVLOC, and (6) NTLMSSP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-05T04:00:00.000Z
CVE-2005-1458 
Multiple unknown "other problems" in the KINK dissector in Ethereal before 0.10.11 have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-05T04:00:00.000Z
CVE-2005-1459 
Multiple unknown vulnerabilities in the (1) WSP, (2) BER, (3) SMB, (4) NDPS, (5) IAX2, (6) RADIUS, (7) TCAP, (8) MRDISC, (9) 802.3 Slow, (10) SMBMailslot, or (11) SMB PIPE dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-05T04:00:00.000Z
CVE-2005-1460 
Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error) via an invalid protocol tree item length.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-05T04:00:00.000Z
CVE-2005-1461 
Multiple buffer overflows in the (1) SIP, (2) CMIP, (3) CMP, (4) CMS, (5) CRMF, (6) ESS, (7) OCSP, (8) X.509, (9) ISIS, (10) DISTCC, (11) FCELS, (12) Q.931, (13) NCP, (14) TCAP, (15) ISUP, (16) MEGACO, (17) PKIX1Explitit, (18) PKIX_Qualified, (19) Presentation dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-05T04:00:00.000Z
CVE-2005-1462 
Double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-05T04:00:00.000Z
CVE-2005-1463 
Multiple format string vulnerabilities in the (1) DHCP and (2) ANSI A dissectors in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-05T04:00:00.000Z
CVE-2005-1464 
Multiple unknown vulnerabilities in the (1) KINK, (2) L2TP, (3) MGCP, (4) EIGRP, (5) DLSw, (6) MEGACO, (7) LMP, and (8) RSVP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (infinite loop).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-05T04:00:00.000Z
CVE-2005-1465 
Unknown vulnerability in the NCP dissector in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (long loop).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-05T04:00:00.000Z
CVE-2005-1466 
Unknown vulnerability in the DICOM dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service (large memory allocation) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-05T04:00:00.000Z
CVE-2005-1467 
Unknown vulnerability in the NDPS dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service (memory exhaustion) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-05T04:00:00.000Z
CVE-2005-1468 
Multiple unknown vulnerabilities in the (1) WSP, (2) Q.931, (3) H.245, (4) KINK, (5) MGCP, (6) RPC, (7) SMBMailslot, and (8) SMB NETLOGON dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) via unknown vectors that lead to a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-05T04:00:00.000Z
CVE-2005-1469 
Unknown vulnerability in the GSM dissector in Ethereal before 0.10.11 allows remote attackers to cause the dissector to access an invalid pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-05T04:00:00.000Z
CVE-2005-1470 
Multiple unknown vulnerabilities in the (1) TZSP, (2) MGCP, (3) ISUP, (4) SMB, or (5) Bittorrent dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (segmentation fault) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-05T04:00:00.000Z
CVE-2005-1471 
Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote attackers to execute arbitrary code via crafted chunked-encoding data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-06T04:00:00.000Z
CVE-2005-1472 
Certain system calls in Apple Mac OS X 10.4.1 do not properly enforce the permissions of certain directories without the POSIX read bit set, but with the execute bits set for group or other, which allows local users to list files in otherwise restricted directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-09T04:00:00.000Z
CVE-2005-1473 
SecurityAgent in Apple Mac OS X 10.4.1 allows attackers with physical access to bypass the locked screensaver and launch background applications by opening a URL from a text input field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-09T04:00:00.000Z
CVE-2005-1474 
Dashboard in Apple Mac OS X 10.4.1 allows remote attackers to install widgets via Safari without prompting the user, a different vulnerability than CVE-2005-1933.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-09T04:00:00.000Z
CVE-2005-1475 
The XMLHttpRequest object in Opera 8.0 Final Build 1095 allows remote attackers to bypass access restrictions and perform unauthorized actions on other domains via a redirect.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-16T04:00:00.000Z
CVE-2005-1476 
Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-09T04:00:00.000Z
CVE-2005-1477 
The install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as update.mozilla.org or addon.mozilla.org, to execute arbitrary Javascript with chrome privileges, leading to arbitrary code execution on the system when combined with vulnerabilities such as CVE-2005-1476, as demonstrated using a javascript: URL as the package icon and a cross-site scripting (XSS) attack on a vulnerable whitelist site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-09T04:00:00.000Z
CVE-2005-1478 
Format string vulnerability in dSMTP (dsmtp.exe) in DMail 3.1a allows remote attackers to execute arbitrary code via format string specifiers in the xtellmail command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-11T04:00:00.000Z
CVE-2005-1479 
SQL injection vulnerability in jgs_portal.php in JGS-Portal 3.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-11T04:00:00.000Z
CVE-2005-1480 
Directory traversal vulnerability in RaidenFTPD before 2.4.2241 allows remote attackers to read arbitrary files via a "..\\" (dot dot backslash) in the urlget site command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-11T04:00:00.000Z