Search
Find a vulnerability
Search criteria
8 vulnerabilities by astalavista_it_engineering
CVE-2006-1293 (GCVE-0-2006-1293)
Vulnerability from nvd – Published: 2006-03-19 23:00 – Updated: 2024-08-07 17:03
VLAI
EPSS
VEX
Summary
Cross-site scripting (XSS) vulnerability in index.php in Contrexx CMS 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string (PHP_SELF).
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://soot.shabgard.org/Contrexx-CMS.txt | x_refsource_MISC |
| http://securityreason.com/securityalert/599 | third-party-advisoryx_refsource_SREASON |
| http://www.contrexx.com/?section=media1&act=downl… | x_refsource_MISC |
| http://www.contrexx.com/?section=news&cmd=details… | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/428075/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.vupen.com/english/advisories/2006/1013 | vdb-entryx_refsource_VUPEN |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/19294 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/bid/17128 | vdb-entryx_refsource_BID |
Date Public
2006-03-16 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:03:29.047Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://soot.shabgard.org/Contrexx-CMS.txt"
},
{
"name": "599",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/599"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.contrexx.com/?section=media1\u0026act=download\u0026path=/media/archive1/Opensource/Bugfixes/contrexx_1.0.8/\u0026file=contrexx_v1.0.8_bugfix_27-02-06.zip"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.contrexx.com/?section=news\u0026cmd=details\u0026newsid=54"
},
{
"name": "20060318 Contrexx CMS Xss Vuln",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/428075/100/0/threaded"
},
{
"name": "ADV-2006-1013",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/1013"
},
{
"name": "contrexx-index-xss(25332)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25332"
},
{
"name": "19294",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19294"
},
{
"name": "17128",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17128"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-03-16T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in index.php in Contrexx CMS 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string (PHP_SELF)."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://soot.shabgard.org/Contrexx-CMS.txt"
},
{
"name": "599",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/599"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.contrexx.com/?section=media1\u0026act=download\u0026path=/media/archive1/Opensource/Bugfixes/contrexx_1.0.8/\u0026file=contrexx_v1.0.8_bugfix_27-02-06.zip"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.contrexx.com/?section=news\u0026cmd=details\u0026newsid=54"
},
{
"name": "20060318 Contrexx CMS Xss Vuln",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/428075/100/0/threaded"
},
{
"name": "ADV-2006-1013",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/1013"
},
{
"name": "contrexx-index-xss(25332)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25332"
},
{
"name": "19294",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19294"
},
{
"name": "17128",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17128"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-1293",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in index.php in Contrexx CMS 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string (PHP_SELF)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://soot.shabgard.org/Contrexx-CMS.txt",
"refsource": "MISC",
"url": "http://soot.shabgard.org/Contrexx-CMS.txt"
},
{
"name": "599",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/599"
},
{
"name": "http://www.contrexx.com/?section=media1\u0026act=download\u0026path=/media/archive1/Opensource/Bugfixes/contrexx_1.0.8/\u0026file=contrexx_v1.0.8_bugfix_27-02-06.zip",
"refsource": "MISC",
"url": "http://www.contrexx.com/?section=media1\u0026act=download\u0026path=/media/archive1/Opensource/Bugfixes/contrexx_1.0.8/\u0026file=contrexx_v1.0.8_bugfix_27-02-06.zip"
},
{
"name": "http://www.contrexx.com/?section=news\u0026cmd=details\u0026newsid=54",
"refsource": "MISC",
"url": "http://www.contrexx.com/?section=news\u0026cmd=details\u0026newsid=54"
},
{
"name": "20060318 Contrexx CMS Xss Vuln",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/428075/100/0/threaded"
},
{
"name": "ADV-2006-1013",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/1013"
},
{
"name": "contrexx-index-xss(25332)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25332"
},
{
"name": "19294",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/19294"
},
{
"name": "17128",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17128"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-1293",
"datePublished": "2006-03-19T23:00:00.000Z",
"dateReserved": "2006-03-19T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:03:29.047Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-2416 (GCVE-0-2005-2416)
Vulnerability from nvd – Published: 2005-08-03 04:00 – Updated: 2024-08-07 22:22
VLAI
EPSS
VEX
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Contrexx before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) term parameter to the search module or (2) title in the blog aggregation module.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://securitytracker.com/id?1014554 | vdb-entryx_refsource_SECTRACK |
| http://www.osvdb.org/18168 | vdb-entryx_refsource_OSVDB |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/16169 | third-party-advisoryx_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.osvdb.org/18169 | vdb-entryx_refsource_OSVDB |
| http://marc.info/?l=bugtraq&m=112206702015439&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/14352 | vdb-entryx_refsource_BID |
| http://www.hardened-php.net/advisory_112005.59.html | x_refsource_MISC |
Date Public
2005-07-22 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T22:22:49.162Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1014554",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1014554"
},
{
"name": "18168",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/18168"
},
{
"name": "contrexx-search-xss(21484)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21484"
},
{
"name": "16169",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/16169"
},
{
"name": "contrexx-blog-xss(21487)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21487"
},
{
"name": "18169",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/18169"
},
{
"name": "20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112206702015439\u0026w=2"
},
{
"name": "14352",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/14352"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.hardened-php.net/advisory_112005.59.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-07-22T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in Contrexx before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) term parameter to the search module or (2) title in the blog aggregation module."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "1014554",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1014554"
},
{
"name": "18168",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/18168"
},
{
"name": "contrexx-search-xss(21484)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21484"
},
{
"name": "16169",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/16169"
},
{
"name": "contrexx-blog-xss(21487)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21487"
},
{
"name": "18169",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/18169"
},
{
"name": "20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112206702015439\u0026w=2"
},
{
"name": "14352",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/14352"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.hardened-php.net/advisory_112005.59.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-2416",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in Contrexx before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) term parameter to the search module or (2) title in the blog aggregation module."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1014554",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1014554"
},
{
"name": "18168",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/18168"
},
{
"name": "contrexx-search-xss(21484)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21484"
},
{
"name": "16169",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/16169"
},
{
"name": "contrexx-blog-xss(21487)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21487"
},
{
"name": "18169",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/18169"
},
{
"name": "20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=112206702015439\u0026w=2"
},
{
"name": "14352",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/14352"
},
{
"name": "http://www.hardened-php.net/advisory_112005.59.html",
"refsource": "MISC",
"url": "http://www.hardened-php.net/advisory_112005.59.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-2416",
"datePublished": "2005-08-03T04:00:00.000Z",
"dateReserved": "2005-08-03T00:00:00.000Z",
"dateUpdated": "2024-08-07T22:22:49.162Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-2417 (GCVE-0-2005-2417)
Vulnerability from nvd – Published: 2005-08-03 04:00 – Updated: 2024-08-07 22:22
VLAI
EPSS
VEX
Summary
Contrexx before 1.0.5 allows remote attackers to obtain sensitive information via a direct request to /config/version.xml.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://securitytracker.com/id?1014554 | vdb-entryx_refsource_SECTRACK |
| http://secunia.com/advisories/16169 | third-party-advisoryx_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://marc.info/?l=bugtraq&m=112206702015439&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/14352 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/18170 | vdb-entryx_refsource_OSVDB |
| http://www.hardened-php.net/advisory_112005.59.html | x_refsource_MISC |
Date Public
2005-07-22 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T22:22:49.133Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1014554",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1014554"
},
{
"name": "16169",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/16169"
},
{
"name": "contrexx-version-disclosure(21488)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21488"
},
{
"name": "20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112206702015439\u0026w=2"
},
{
"name": "14352",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/14352"
},
{
"name": "18170",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/18170"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.hardened-php.net/advisory_112005.59.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-07-22T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Contrexx before 1.0.5 allows remote attackers to obtain sensitive information via a direct request to /config/version.xml."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "1014554",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1014554"
},
{
"name": "16169",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/16169"
},
{
"name": "contrexx-version-disclosure(21488)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21488"
},
{
"name": "20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112206702015439\u0026w=2"
},
{
"name": "14352",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/14352"
},
{
"name": "18170",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/18170"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.hardened-php.net/advisory_112005.59.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-2417",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Contrexx before 1.0.5 allows remote attackers to obtain sensitive information via a direct request to /config/version.xml."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1014554",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1014554"
},
{
"name": "16169",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/16169"
},
{
"name": "contrexx-version-disclosure(21488)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21488"
},
{
"name": "20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=112206702015439\u0026w=2"
},
{
"name": "14352",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/14352"
},
{
"name": "18170",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/18170"
},
{
"name": "http://www.hardened-php.net/advisory_112005.59.html",
"refsource": "MISC",
"url": "http://www.hardened-php.net/advisory_112005.59.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-2417",
"datePublished": "2005-08-03T04:00:00.000Z",
"dateReserved": "2005-08-03T00:00:00.000Z",
"dateUpdated": "2024-08-07T22:22:49.133Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-2415 (GCVE-0-2005-2415)
Vulnerability from nvd – Published: 2005-08-03 04:00 – Updated: 2024-08-07 22:22
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in Contrexx before 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) value parameter to the poll module or (2) pId parameter to the gallery module.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://securitytracker.com/id?1014554 | vdb-entryx_refsource_SECTRACK |
| http://secunia.com/advisories/16169 | third-party-advisoryx_refsource_SECUNIA |
| http://marc.info/?l=bugtraq&m=112206702015439&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/14352 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/18166 | vdb-entryx_refsource_OSVDB |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.osvdb.org/18167 | vdb-entryx_refsource_OSVDB |
| http://www.hardened-php.net/advisory_112005.59.html | x_refsource_MISC |
Date Public
2005-07-22 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T22:22:49.133Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1014554",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1014554"
},
{
"name": "16169",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/16169"
},
{
"name": "20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112206702015439\u0026w=2"
},
{
"name": "14352",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/14352"
},
{
"name": "18166",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/18166"
},
{
"name": "contrexx-votingoption-pld-sql-injection(21482)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21482"
},
{
"name": "18167",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/18167"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.hardened-php.net/advisory_112005.59.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-07-22T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in Contrexx before 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) value parameter to the poll module or (2) pId parameter to the gallery module."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "1014554",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1014554"
},
{
"name": "16169",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/16169"
},
{
"name": "20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112206702015439\u0026w=2"
},
{
"name": "14352",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/14352"
},
{
"name": "18166",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/18166"
},
{
"name": "contrexx-votingoption-pld-sql-injection(21482)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21482"
},
{
"name": "18167",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/18167"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.hardened-php.net/advisory_112005.59.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-2415",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in Contrexx before 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) value parameter to the poll module or (2) pId parameter to the gallery module."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1014554",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1014554"
},
{
"name": "16169",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/16169"
},
{
"name": "20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=112206702015439\u0026w=2"
},
{
"name": "14352",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/14352"
},
{
"name": "18166",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/18166"
},
{
"name": "contrexx-votingoption-pld-sql-injection(21482)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21482"
},
{
"name": "18167",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/18167"
},
{
"name": "http://www.hardened-php.net/advisory_112005.59.html",
"refsource": "MISC",
"url": "http://www.hardened-php.net/advisory_112005.59.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-2415",
"datePublished": "2005-08-03T04:00:00.000Z",
"dateReserved": "2005-08-03T00:00:00.000Z",
"dateUpdated": "2024-08-07T22:22:49.133Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-1293 (GCVE-0-2006-1293)
Vulnerability from cvelistv5 – Published: 2006-03-19 23:00 – Updated: 2024-08-07 17:03
VLAI
EPSS
VEX
Summary
Cross-site scripting (XSS) vulnerability in index.php in Contrexx CMS 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string (PHP_SELF).
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://soot.shabgard.org/Contrexx-CMS.txt | x_refsource_MISC |
| http://securityreason.com/securityalert/599 | third-party-advisoryx_refsource_SREASON |
| http://www.contrexx.com/?section=media1&act=downl… | x_refsource_MISC |
| http://www.contrexx.com/?section=news&cmd=details… | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/428075/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.vupen.com/english/advisories/2006/1013 | vdb-entryx_refsource_VUPEN |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/19294 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/bid/17128 | vdb-entryx_refsource_BID |
Date Public
2006-03-16 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:03:29.047Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://soot.shabgard.org/Contrexx-CMS.txt"
},
{
"name": "599",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/599"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.contrexx.com/?section=media1\u0026act=download\u0026path=/media/archive1/Opensource/Bugfixes/contrexx_1.0.8/\u0026file=contrexx_v1.0.8_bugfix_27-02-06.zip"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.contrexx.com/?section=news\u0026cmd=details\u0026newsid=54"
},
{
"name": "20060318 Contrexx CMS Xss Vuln",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/428075/100/0/threaded"
},
{
"name": "ADV-2006-1013",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/1013"
},
{
"name": "contrexx-index-xss(25332)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25332"
},
{
"name": "19294",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19294"
},
{
"name": "17128",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17128"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-03-16T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in index.php in Contrexx CMS 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string (PHP_SELF)."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://soot.shabgard.org/Contrexx-CMS.txt"
},
{
"name": "599",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/599"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.contrexx.com/?section=media1\u0026act=download\u0026path=/media/archive1/Opensource/Bugfixes/contrexx_1.0.8/\u0026file=contrexx_v1.0.8_bugfix_27-02-06.zip"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.contrexx.com/?section=news\u0026cmd=details\u0026newsid=54"
},
{
"name": "20060318 Contrexx CMS Xss Vuln",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/428075/100/0/threaded"
},
{
"name": "ADV-2006-1013",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/1013"
},
{
"name": "contrexx-index-xss(25332)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25332"
},
{
"name": "19294",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19294"
},
{
"name": "17128",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17128"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-1293",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in index.php in Contrexx CMS 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string (PHP_SELF)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://soot.shabgard.org/Contrexx-CMS.txt",
"refsource": "MISC",
"url": "http://soot.shabgard.org/Contrexx-CMS.txt"
},
{
"name": "599",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/599"
},
{
"name": "http://www.contrexx.com/?section=media1\u0026act=download\u0026path=/media/archive1/Opensource/Bugfixes/contrexx_1.0.8/\u0026file=contrexx_v1.0.8_bugfix_27-02-06.zip",
"refsource": "MISC",
"url": "http://www.contrexx.com/?section=media1\u0026act=download\u0026path=/media/archive1/Opensource/Bugfixes/contrexx_1.0.8/\u0026file=contrexx_v1.0.8_bugfix_27-02-06.zip"
},
{
"name": "http://www.contrexx.com/?section=news\u0026cmd=details\u0026newsid=54",
"refsource": "MISC",
"url": "http://www.contrexx.com/?section=news\u0026cmd=details\u0026newsid=54"
},
{
"name": "20060318 Contrexx CMS Xss Vuln",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/428075/100/0/threaded"
},
{
"name": "ADV-2006-1013",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/1013"
},
{
"name": "contrexx-index-xss(25332)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25332"
},
{
"name": "19294",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/19294"
},
{
"name": "17128",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17128"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-1293",
"datePublished": "2006-03-19T23:00:00.000Z",
"dateReserved": "2006-03-19T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:03:29.047Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-2416 (GCVE-0-2005-2416)
Vulnerability from cvelistv5 – Published: 2005-08-03 04:00 – Updated: 2024-08-07 22:22
VLAI
EPSS
VEX
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Contrexx before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) term parameter to the search module or (2) title in the blog aggregation module.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://securitytracker.com/id?1014554 | vdb-entryx_refsource_SECTRACK |
| http://www.osvdb.org/18168 | vdb-entryx_refsource_OSVDB |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/16169 | third-party-advisoryx_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.osvdb.org/18169 | vdb-entryx_refsource_OSVDB |
| http://marc.info/?l=bugtraq&m=112206702015439&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/14352 | vdb-entryx_refsource_BID |
| http://www.hardened-php.net/advisory_112005.59.html | x_refsource_MISC |
Date Public
2005-07-22 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T22:22:49.162Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1014554",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1014554"
},
{
"name": "18168",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/18168"
},
{
"name": "contrexx-search-xss(21484)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21484"
},
{
"name": "16169",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/16169"
},
{
"name": "contrexx-blog-xss(21487)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21487"
},
{
"name": "18169",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/18169"
},
{
"name": "20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112206702015439\u0026w=2"
},
{
"name": "14352",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/14352"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.hardened-php.net/advisory_112005.59.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-07-22T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in Contrexx before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) term parameter to the search module or (2) title in the blog aggregation module."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "1014554",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1014554"
},
{
"name": "18168",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/18168"
},
{
"name": "contrexx-search-xss(21484)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21484"
},
{
"name": "16169",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/16169"
},
{
"name": "contrexx-blog-xss(21487)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21487"
},
{
"name": "18169",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/18169"
},
{
"name": "20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112206702015439\u0026w=2"
},
{
"name": "14352",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/14352"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.hardened-php.net/advisory_112005.59.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-2416",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in Contrexx before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) term parameter to the search module or (2) title in the blog aggregation module."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1014554",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1014554"
},
{
"name": "18168",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/18168"
},
{
"name": "contrexx-search-xss(21484)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21484"
},
{
"name": "16169",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/16169"
},
{
"name": "contrexx-blog-xss(21487)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21487"
},
{
"name": "18169",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/18169"
},
{
"name": "20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=112206702015439\u0026w=2"
},
{
"name": "14352",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/14352"
},
{
"name": "http://www.hardened-php.net/advisory_112005.59.html",
"refsource": "MISC",
"url": "http://www.hardened-php.net/advisory_112005.59.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-2416",
"datePublished": "2005-08-03T04:00:00.000Z",
"dateReserved": "2005-08-03T00:00:00.000Z",
"dateUpdated": "2024-08-07T22:22:49.162Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-2417 (GCVE-0-2005-2417)
Vulnerability from cvelistv5 – Published: 2005-08-03 04:00 – Updated: 2024-08-07 22:22
VLAI
EPSS
VEX
Summary
Contrexx before 1.0.5 allows remote attackers to obtain sensitive information via a direct request to /config/version.xml.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://securitytracker.com/id?1014554 | vdb-entryx_refsource_SECTRACK |
| http://secunia.com/advisories/16169 | third-party-advisoryx_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://marc.info/?l=bugtraq&m=112206702015439&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/14352 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/18170 | vdb-entryx_refsource_OSVDB |
| http://www.hardened-php.net/advisory_112005.59.html | x_refsource_MISC |
Date Public
2005-07-22 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T22:22:49.133Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1014554",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1014554"
},
{
"name": "16169",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/16169"
},
{
"name": "contrexx-version-disclosure(21488)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21488"
},
{
"name": "20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112206702015439\u0026w=2"
},
{
"name": "14352",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/14352"
},
{
"name": "18170",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/18170"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.hardened-php.net/advisory_112005.59.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-07-22T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Contrexx before 1.0.5 allows remote attackers to obtain sensitive information via a direct request to /config/version.xml."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "1014554",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1014554"
},
{
"name": "16169",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/16169"
},
{
"name": "contrexx-version-disclosure(21488)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21488"
},
{
"name": "20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112206702015439\u0026w=2"
},
{
"name": "14352",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/14352"
},
{
"name": "18170",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/18170"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.hardened-php.net/advisory_112005.59.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-2417",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Contrexx before 1.0.5 allows remote attackers to obtain sensitive information via a direct request to /config/version.xml."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1014554",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1014554"
},
{
"name": "16169",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/16169"
},
{
"name": "contrexx-version-disclosure(21488)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21488"
},
{
"name": "20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=112206702015439\u0026w=2"
},
{
"name": "14352",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/14352"
},
{
"name": "18170",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/18170"
},
{
"name": "http://www.hardened-php.net/advisory_112005.59.html",
"refsource": "MISC",
"url": "http://www.hardened-php.net/advisory_112005.59.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-2417",
"datePublished": "2005-08-03T04:00:00.000Z",
"dateReserved": "2005-08-03T00:00:00.000Z",
"dateUpdated": "2024-08-07T22:22:49.133Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-2415 (GCVE-0-2005-2415)
Vulnerability from cvelistv5 – Published: 2005-08-03 04:00 – Updated: 2024-08-07 22:22
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in Contrexx before 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) value parameter to the poll module or (2) pId parameter to the gallery module.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://securitytracker.com/id?1014554 | vdb-entryx_refsource_SECTRACK |
| http://secunia.com/advisories/16169 | third-party-advisoryx_refsource_SECUNIA |
| http://marc.info/?l=bugtraq&m=112206702015439&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/14352 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/18166 | vdb-entryx_refsource_OSVDB |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.osvdb.org/18167 | vdb-entryx_refsource_OSVDB |
| http://www.hardened-php.net/advisory_112005.59.html | x_refsource_MISC |
Date Public
2005-07-22 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T22:22:49.133Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1014554",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1014554"
},
{
"name": "16169",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/16169"
},
{
"name": "20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112206702015439\u0026w=2"
},
{
"name": "14352",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/14352"
},
{
"name": "18166",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/18166"
},
{
"name": "contrexx-votingoption-pld-sql-injection(21482)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21482"
},
{
"name": "18167",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/18167"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.hardened-php.net/advisory_112005.59.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-07-22T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in Contrexx before 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) value parameter to the poll module or (2) pId parameter to the gallery module."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "1014554",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1014554"
},
{
"name": "16169",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/16169"
},
{
"name": "20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112206702015439\u0026w=2"
},
{
"name": "14352",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/14352"
},
{
"name": "18166",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/18166"
},
{
"name": "contrexx-votingoption-pld-sql-injection(21482)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21482"
},
{
"name": "18167",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/18167"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.hardened-php.net/advisory_112005.59.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-2415",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in Contrexx before 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) value parameter to the poll module or (2) pId parameter to the gallery module."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1014554",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1014554"
},
{
"name": "16169",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/16169"
},
{
"name": "20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=112206702015439\u0026w=2"
},
{
"name": "14352",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/14352"
},
{
"name": "18166",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/18166"
},
{
"name": "contrexx-votingoption-pld-sql-injection(21482)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21482"
},
{
"name": "18167",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/18167"
},
{
"name": "http://www.hardened-php.net/advisory_112005.59.html",
"refsource": "MISC",
"url": "http://www.hardened-php.net/advisory_112005.59.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-2415",
"datePublished": "2005-08-03T04:00:00.000Z",
"dateReserved": "2005-08-03T00:00:00.000Z",
"dateUpdated": "2024-08-07T22:22:49.133Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}