Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
10 vulnerabilities by interchange_development_group
CVE-2008-2423 (GCVE-0-2008-2423)
Vulnerability from nvd – Published: 2008-05-23 15:00 – Updated: 2024-08-07 08:58
VLAI
EPSS
VEX
Summary
Unspecified vulnerability in Interchange before 5.6.0 and before 5.5.2 allows remote attackers to cause a denial of service via crafted HTTP requests. NOTE: this might overlap CVE-2007-2635.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://ftp.icdevgroup.org/pub/interchange/5.5/ANN… | x_refsource_CONFIRM |
| http://ftp.icdevgroup.org/interchange/5.6/ANNOUNC… | x_refsource_CONFIRM |
| http://secunia.com/advisories/30346 | third-party-advisoryx_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.vupen.com/english/advisories/2008/1621… | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/bid/28987 | vdb-entryx_refsource_BID |
| http://www.securityfocus.com/bid/29334 | vdb-entryx_refsource_BID |
Date Public
2008-05-22 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T08:58:02.611Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "interchange-unspec-dos(42801)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42801"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://ftp.icdevgroup.org/pub/interchange/5.5/ANNOUNCEMENT-5.5.2.txt"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://ftp.icdevgroup.org/interchange/5.6/ANNOUNCEMENT-5.6.0.txt"
},
{
"name": "30346",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/30346"
},
{
"name": "interchange-unspecified-dos(42120)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42120"
},
{
"name": "interchange-http-post-dos(42580)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42580"
},
{
"name": "ADV-2008-1621",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/1621/references"
},
{
"name": "28987",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/28987"
},
{
"name": "29334",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/29334"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-05-22T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Interchange before 5.6.0 and before 5.5.2 allows remote attackers to cause a denial of service via crafted HTTP requests. NOTE: this might overlap CVE-2007-2635."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-07T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "interchange-unspec-dos(42801)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42801"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://ftp.icdevgroup.org/pub/interchange/5.5/ANNOUNCEMENT-5.5.2.txt"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://ftp.icdevgroup.org/interchange/5.6/ANNOUNCEMENT-5.6.0.txt"
},
{
"name": "30346",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/30346"
},
{
"name": "interchange-unspecified-dos(42120)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42120"
},
{
"name": "interchange-http-post-dos(42580)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42580"
},
{
"name": "ADV-2008-1621",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/1621/references"
},
{
"name": "28987",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/28987"
},
{
"name": "29334",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/29334"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-2423",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in Interchange before 5.6.0 and before 5.5.2 allows remote attackers to cause a denial of service via crafted HTTP requests. NOTE: this might overlap CVE-2007-2635."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "interchange-unspec-dos(42801)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42801"
},
{
"name": "http://ftp.icdevgroup.org/pub/interchange/5.5/ANNOUNCEMENT-5.5.2.txt",
"refsource": "CONFIRM",
"url": "http://ftp.icdevgroup.org/pub/interchange/5.5/ANNOUNCEMENT-5.5.2.txt"
},
{
"name": "http://ftp.icdevgroup.org/interchange/5.6/ANNOUNCEMENT-5.6.0.txt",
"refsource": "CONFIRM",
"url": "http://ftp.icdevgroup.org/interchange/5.6/ANNOUNCEMENT-5.6.0.txt"
},
{
"name": "30346",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/30346"
},
{
"name": "interchange-unspecified-dos(42120)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42120"
},
{
"name": "interchange-http-post-dos(42580)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42580"
},
{
"name": "ADV-2008-1621",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/1621/references"
},
{
"name": "28987",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/28987"
},
{
"name": "29334",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/29334"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2008-2423",
"datePublished": "2008-05-23T15:00:00.000Z",
"dateReserved": "2008-05-23T00:00:00.000Z",
"dateUpdated": "2024-08-07T08:58:02.611Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-2635 (GCVE-0-2007-2635)
Vulnerability from nvd – Published: 2007-05-13 23:00 – Updated: 2024-08-07 13:49
VLAI
EPSS
VEX
Summary
Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service (possibly server hang) via crafted HTTP requests.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| http://ftp.icdevgroup.org/interchange/5.4/ANNOUNC… | x_refsource_CONFIRM |
| http://www.vupen.com/english/advisories/2007/1758 | vdb-entryx_refsource_VUPEN |
| http://osvdb.org/33488 | vdb-entryx_refsource_OSVDB |
| http://secunia.com/advisories/25311 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2007-05-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T13:49:56.027Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://ftp.icdevgroup.org/interchange/5.4/ANNOUNCEMENT-5.4.2.txt"
},
{
"name": "ADV-2007-1758",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/1758"
},
{
"name": "33488",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/33488"
},
{
"name": "25311",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/25311"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-05-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service (possibly server hang) via crafted HTTP requests."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2007-06-01T09:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://ftp.icdevgroup.org/interchange/5.4/ANNOUNCEMENT-5.4.2.txt"
},
{
"name": "ADV-2007-1758",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/1758"
},
{
"name": "33488",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/33488"
},
{
"name": "25311",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/25311"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-2635",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service (possibly server hang) via crafted HTTP requests."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://ftp.icdevgroup.org/interchange/5.4/ANNOUNCEMENT-5.4.2.txt",
"refsource": "CONFIRM",
"url": "http://ftp.icdevgroup.org/interchange/5.4/ANNOUNCEMENT-5.4.2.txt"
},
{
"name": "ADV-2007-1758",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/1758"
},
{
"name": "33488",
"refsource": "OSVDB",
"url": "http://osvdb.org/33488"
},
{
"name": "25311",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/25311"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-2635",
"datePublished": "2007-05-13T23:00:00.000Z",
"dateReserved": "2007-05-13T00:00:00.000Z",
"dateUpdated": "2024-08-07T13:49:56.027Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-3072 (GCVE-0-2005-3072)
Vulnerability from nvd – Published: 2005-09-27 04:00 – Updated: 2024-08-07 23:01
VLAI
EPSS
VEX
Summary
SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/14931 | vdb-entryx_refsource_BID |
| http://www.vupen.com/english/advisories/2005/1829 | vdb-entryx_refsource_VUPEN |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.osvdb.org/19652 | vdb-entryx_refsource_OSVDB |
| http://secunia.com/advisories/16923 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2005-09-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T23:01:57.806Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "14931",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/14931"
},
{
"name": "ADV-2005-1829",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2005/1829"
},
{
"name": "interchange-submit-sql-injection(22386)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22386"
},
{
"name": "19652",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19652"
},
{
"name": "16923",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/16923"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-09-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "14931",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/14931"
},
{
"name": "ADV-2005-1829",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2005/1829"
},
{
"name": "interchange-submit-sql-injection(22386)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22386"
},
{
"name": "19652",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19652"
},
{
"name": "16923",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/16923"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-3072",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "14931",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/14931"
},
{
"name": "ADV-2005-1829",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2005/1829"
},
{
"name": "interchange-submit-sql-injection(22386)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22386"
},
{
"name": "19652",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19652"
},
{
"name": "16923",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/16923"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-3072",
"datePublished": "2005-09-27T04:00:00.000Z",
"dateReserved": "2005-09-27T00:00:00.000Z",
"dateUpdated": "2024-08-07T23:01:57.806Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-3073 (GCVE-0-2005-3073)
Vulnerability from nvd – Published: 2005-09-27 04:00 – Updated: 2024-08-07 23:01
VLAI
EPSS
VEX
Summary
Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the (1) "mike", (2) "standard", or (3) "foundation" demo, allows attackers to inject Interchange Tag Language (ITL) elements into the forum/submit.html page.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/bid/14931 | vdb-entryx_refsource_BID |
| http://secunia.com/advisories/16923 | third-party-advisoryx_refsource_SECUNIA |
| http://www.icdevgroup.org/pipermail/interchange-a… | mailing-listx_refsource_MLIST |
| http://www.icdevgroup.org/pipermail/interchange-a… | mailing-listx_refsource_MLIST |
| http://www.osvdb.org/19653 | vdb-entryx_refsource_OSVDB |
Date Public
2005-09-22 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T23:01:57.694Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "interchange-submit-itl-injection(22387)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22387"
},
{
"name": "14931",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/14931"
},
{
"name": "16923",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/16923"
},
{
"name": "[interchange-announce] 20050922 Important: Security flaw found in Interchange demo catalog.",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.icdevgroup.org/pipermail/interchange-announce/2005/000049.html"
},
{
"name": "[interchange-announce] 20050923 Important: Security flaw found in Interchange demo - Addendum",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.icdevgroup.org/pipermail/interchange-announce/2005/000050.html"
},
{
"name": "19653",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19653"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-09-22T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the (1) \"mike\", (2) \"standard\", or (3) \"foundation\" demo, allows attackers to inject Interchange Tag Language (ITL) elements into the forum/submit.html page."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "interchange-submit-itl-injection(22387)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22387"
},
{
"name": "14931",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/14931"
},
{
"name": "16923",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/16923"
},
{
"name": "[interchange-announce] 20050922 Important: Security flaw found in Interchange demo catalog.",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.icdevgroup.org/pipermail/interchange-announce/2005/000049.html"
},
{
"name": "[interchange-announce] 20050923 Important: Security flaw found in Interchange demo - Addendum",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.icdevgroup.org/pipermail/interchange-announce/2005/000050.html"
},
{
"name": "19653",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19653"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-3073",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the (1) \"mike\", (2) \"standard\", or (3) \"foundation\" demo, allows attackers to inject Interchange Tag Language (ITL) elements into the forum/submit.html page."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "interchange-submit-itl-injection(22387)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22387"
},
{
"name": "14931",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/14931"
},
{
"name": "16923",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/16923"
},
{
"name": "[interchange-announce] 20050922 Important: Security flaw found in Interchange demo catalog.",
"refsource": "MLIST",
"url": "http://www.icdevgroup.org/pipermail/interchange-announce/2005/000049.html"
},
{
"name": "[interchange-announce] 20050923 Important: Security flaw found in Interchange demo - Addendum",
"refsource": "MLIST",
"url": "http://www.icdevgroup.org/pipermail/interchange-announce/2005/000050.html"
},
{
"name": "19653",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19653"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-3073",
"datePublished": "2005-09-27T04:00:00.000Z",
"dateReserved": "2005-09-27T00:00:00.000Z",
"dateUpdated": "2024-08-07T23:01:57.694Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2004-0374 (GCVE-0-2004-0374)
Vulnerability from nvd – Published: 2004-04-06 04:00 – Updated: 2024-08-08 00:17
VLAI
EPSS
VEX
Summary
Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "__SQLUSER__" string.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://www.icdevgroup.org/pipermail/interchange-a… | mailing-listx_refsource_MLIST |
| http://www.securityfocus.com/bid/10005 | vdb-entryx_refsource_BID |
| http://ftp.icdevgroup.org/interchange/5.0/WHATSNEW | x_refsource_CONFIRM |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/11234 | third-party-advisoryx_refsource_SECUNIA |
| http://www.debian.org/security/2004/dsa-471 | vendor-advisoryx_refsource_DEBIAN |
Date Public
2004-04-02 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T00:17:14.558Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "[interchange-announce] 20040329 Security Problem in Interchange",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.icdevgroup.org/pipermail/interchange-announce/2004/000043.html"
},
{
"name": "10005",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/10005"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://ftp.icdevgroup.org/interchange/5.0/WHATSNEW"
},
{
"name": "interchange-url-obtain-information(15670)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15670"
},
{
"name": "11234",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/11234"
},
{
"name": "DSA-471",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2004/dsa-471"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-04-02T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Interchange before 5.0.1 allows remote attackers to \"expose the content of arbitrary variables\" and read or modify sensitive SQL information via an HTTP request ending with the \"__SQLUSER__\" string."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "[interchange-announce] 20040329 Security Problem in Interchange",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.icdevgroup.org/pipermail/interchange-announce/2004/000043.html"
},
{
"name": "10005",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/10005"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://ftp.icdevgroup.org/interchange/5.0/WHATSNEW"
},
{
"name": "interchange-url-obtain-information(15670)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15670"
},
{
"name": "11234",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/11234"
},
{
"name": "DSA-471",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2004/dsa-471"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-0374",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Interchange before 5.0.1 allows remote attackers to \"expose the content of arbitrary variables\" and read or modify sensitive SQL information via an HTTP request ending with the \"__SQLUSER__\" string."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "[interchange-announce] 20040329 Security Problem in Interchange",
"refsource": "MLIST",
"url": "http://www.icdevgroup.org/pipermail/interchange-announce/2004/000043.html"
},
{
"name": "10005",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/10005"
},
{
"name": "http://ftp.icdevgroup.org/interchange/5.0/WHATSNEW",
"refsource": "CONFIRM",
"url": "http://ftp.icdevgroup.org/interchange/5.0/WHATSNEW"
},
{
"name": "interchange-url-obtain-information(15670)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15670"
},
{
"name": "11234",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/11234"
},
{
"name": "DSA-471",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2004/dsa-471"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-0374",
"datePublished": "2004-04-06T04:00:00.000Z",
"dateReserved": "2004-03-29T00:00:00.000Z",
"dateUpdated": "2024-08-08T00:17:14.558Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2008-2423 (GCVE-0-2008-2423)
Vulnerability from cvelistv5 – Published: 2008-05-23 15:00 – Updated: 2024-08-07 08:58
VLAI
EPSS
VEX
Summary
Unspecified vulnerability in Interchange before 5.6.0 and before 5.5.2 allows remote attackers to cause a denial of service via crafted HTTP requests. NOTE: this might overlap CVE-2007-2635.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://ftp.icdevgroup.org/pub/interchange/5.5/ANN… | x_refsource_CONFIRM |
| http://ftp.icdevgroup.org/interchange/5.6/ANNOUNC… | x_refsource_CONFIRM |
| http://secunia.com/advisories/30346 | third-party-advisoryx_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.vupen.com/english/advisories/2008/1621… | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/bid/28987 | vdb-entryx_refsource_BID |
| http://www.securityfocus.com/bid/29334 | vdb-entryx_refsource_BID |
Date Public
2008-05-22 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T08:58:02.611Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "interchange-unspec-dos(42801)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42801"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://ftp.icdevgroup.org/pub/interchange/5.5/ANNOUNCEMENT-5.5.2.txt"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://ftp.icdevgroup.org/interchange/5.6/ANNOUNCEMENT-5.6.0.txt"
},
{
"name": "30346",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/30346"
},
{
"name": "interchange-unspecified-dos(42120)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42120"
},
{
"name": "interchange-http-post-dos(42580)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42580"
},
{
"name": "ADV-2008-1621",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/1621/references"
},
{
"name": "28987",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/28987"
},
{
"name": "29334",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/29334"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-05-22T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Interchange before 5.6.0 and before 5.5.2 allows remote attackers to cause a denial of service via crafted HTTP requests. NOTE: this might overlap CVE-2007-2635."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-07T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "interchange-unspec-dos(42801)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42801"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://ftp.icdevgroup.org/pub/interchange/5.5/ANNOUNCEMENT-5.5.2.txt"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://ftp.icdevgroup.org/interchange/5.6/ANNOUNCEMENT-5.6.0.txt"
},
{
"name": "30346",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/30346"
},
{
"name": "interchange-unspecified-dos(42120)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42120"
},
{
"name": "interchange-http-post-dos(42580)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42580"
},
{
"name": "ADV-2008-1621",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/1621/references"
},
{
"name": "28987",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/28987"
},
{
"name": "29334",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/29334"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-2423",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in Interchange before 5.6.0 and before 5.5.2 allows remote attackers to cause a denial of service via crafted HTTP requests. NOTE: this might overlap CVE-2007-2635."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "interchange-unspec-dos(42801)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42801"
},
{
"name": "http://ftp.icdevgroup.org/pub/interchange/5.5/ANNOUNCEMENT-5.5.2.txt",
"refsource": "CONFIRM",
"url": "http://ftp.icdevgroup.org/pub/interchange/5.5/ANNOUNCEMENT-5.5.2.txt"
},
{
"name": "http://ftp.icdevgroup.org/interchange/5.6/ANNOUNCEMENT-5.6.0.txt",
"refsource": "CONFIRM",
"url": "http://ftp.icdevgroup.org/interchange/5.6/ANNOUNCEMENT-5.6.0.txt"
},
{
"name": "30346",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/30346"
},
{
"name": "interchange-unspecified-dos(42120)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42120"
},
{
"name": "interchange-http-post-dos(42580)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42580"
},
{
"name": "ADV-2008-1621",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/1621/references"
},
{
"name": "28987",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/28987"
},
{
"name": "29334",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/29334"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2008-2423",
"datePublished": "2008-05-23T15:00:00.000Z",
"dateReserved": "2008-05-23T00:00:00.000Z",
"dateUpdated": "2024-08-07T08:58:02.611Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-2635 (GCVE-0-2007-2635)
Vulnerability from cvelistv5 – Published: 2007-05-13 23:00 – Updated: 2024-08-07 13:49
VLAI
EPSS
VEX
Summary
Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service (possibly server hang) via crafted HTTP requests.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| http://ftp.icdevgroup.org/interchange/5.4/ANNOUNC… | x_refsource_CONFIRM |
| http://www.vupen.com/english/advisories/2007/1758 | vdb-entryx_refsource_VUPEN |
| http://osvdb.org/33488 | vdb-entryx_refsource_OSVDB |
| http://secunia.com/advisories/25311 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2007-05-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T13:49:56.027Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://ftp.icdevgroup.org/interchange/5.4/ANNOUNCEMENT-5.4.2.txt"
},
{
"name": "ADV-2007-1758",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/1758"
},
{
"name": "33488",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/33488"
},
{
"name": "25311",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/25311"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-05-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service (possibly server hang) via crafted HTTP requests."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2007-06-01T09:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://ftp.icdevgroup.org/interchange/5.4/ANNOUNCEMENT-5.4.2.txt"
},
{
"name": "ADV-2007-1758",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/1758"
},
{
"name": "33488",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/33488"
},
{
"name": "25311",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/25311"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-2635",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service (possibly server hang) via crafted HTTP requests."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://ftp.icdevgroup.org/interchange/5.4/ANNOUNCEMENT-5.4.2.txt",
"refsource": "CONFIRM",
"url": "http://ftp.icdevgroup.org/interchange/5.4/ANNOUNCEMENT-5.4.2.txt"
},
{
"name": "ADV-2007-1758",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/1758"
},
{
"name": "33488",
"refsource": "OSVDB",
"url": "http://osvdb.org/33488"
},
{
"name": "25311",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/25311"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-2635",
"datePublished": "2007-05-13T23:00:00.000Z",
"dateReserved": "2007-05-13T00:00:00.000Z",
"dateUpdated": "2024-08-07T13:49:56.027Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-3072 (GCVE-0-2005-3072)
Vulnerability from cvelistv5 – Published: 2005-09-27 04:00 – Updated: 2024-08-07 23:01
VLAI
EPSS
VEX
Summary
SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/14931 | vdb-entryx_refsource_BID |
| http://www.vupen.com/english/advisories/2005/1829 | vdb-entryx_refsource_VUPEN |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.osvdb.org/19652 | vdb-entryx_refsource_OSVDB |
| http://secunia.com/advisories/16923 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2005-09-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T23:01:57.806Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "14931",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/14931"
},
{
"name": "ADV-2005-1829",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2005/1829"
},
{
"name": "interchange-submit-sql-injection(22386)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22386"
},
{
"name": "19652",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19652"
},
{
"name": "16923",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/16923"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-09-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "14931",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/14931"
},
{
"name": "ADV-2005-1829",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2005/1829"
},
{
"name": "interchange-submit-sql-injection(22386)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22386"
},
{
"name": "19652",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19652"
},
{
"name": "16923",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/16923"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-3072",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "14931",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/14931"
},
{
"name": "ADV-2005-1829",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2005/1829"
},
{
"name": "interchange-submit-sql-injection(22386)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22386"
},
{
"name": "19652",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19652"
},
{
"name": "16923",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/16923"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-3072",
"datePublished": "2005-09-27T04:00:00.000Z",
"dateReserved": "2005-09-27T00:00:00.000Z",
"dateUpdated": "2024-08-07T23:01:57.806Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-3073 (GCVE-0-2005-3073)
Vulnerability from cvelistv5 – Published: 2005-09-27 04:00 – Updated: 2024-08-07 23:01
VLAI
EPSS
VEX
Summary
Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the (1) "mike", (2) "standard", or (3) "foundation" demo, allows attackers to inject Interchange Tag Language (ITL) elements into the forum/submit.html page.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/bid/14931 | vdb-entryx_refsource_BID |
| http://secunia.com/advisories/16923 | third-party-advisoryx_refsource_SECUNIA |
| http://www.icdevgroup.org/pipermail/interchange-a… | mailing-listx_refsource_MLIST |
| http://www.icdevgroup.org/pipermail/interchange-a… | mailing-listx_refsource_MLIST |
| http://www.osvdb.org/19653 | vdb-entryx_refsource_OSVDB |
Date Public
2005-09-22 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T23:01:57.694Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "interchange-submit-itl-injection(22387)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22387"
},
{
"name": "14931",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/14931"
},
{
"name": "16923",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/16923"
},
{
"name": "[interchange-announce] 20050922 Important: Security flaw found in Interchange demo catalog.",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.icdevgroup.org/pipermail/interchange-announce/2005/000049.html"
},
{
"name": "[interchange-announce] 20050923 Important: Security flaw found in Interchange demo - Addendum",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.icdevgroup.org/pipermail/interchange-announce/2005/000050.html"
},
{
"name": "19653",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19653"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-09-22T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the (1) \"mike\", (2) \"standard\", or (3) \"foundation\" demo, allows attackers to inject Interchange Tag Language (ITL) elements into the forum/submit.html page."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "interchange-submit-itl-injection(22387)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22387"
},
{
"name": "14931",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/14931"
},
{
"name": "16923",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/16923"
},
{
"name": "[interchange-announce] 20050922 Important: Security flaw found in Interchange demo catalog.",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.icdevgroup.org/pipermail/interchange-announce/2005/000049.html"
},
{
"name": "[interchange-announce] 20050923 Important: Security flaw found in Interchange demo - Addendum",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.icdevgroup.org/pipermail/interchange-announce/2005/000050.html"
},
{
"name": "19653",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19653"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-3073",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the (1) \"mike\", (2) \"standard\", or (3) \"foundation\" demo, allows attackers to inject Interchange Tag Language (ITL) elements into the forum/submit.html page."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "interchange-submit-itl-injection(22387)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22387"
},
{
"name": "14931",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/14931"
},
{
"name": "16923",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/16923"
},
{
"name": "[interchange-announce] 20050922 Important: Security flaw found in Interchange demo catalog.",
"refsource": "MLIST",
"url": "http://www.icdevgroup.org/pipermail/interchange-announce/2005/000049.html"
},
{
"name": "[interchange-announce] 20050923 Important: Security flaw found in Interchange demo - Addendum",
"refsource": "MLIST",
"url": "http://www.icdevgroup.org/pipermail/interchange-announce/2005/000050.html"
},
{
"name": "19653",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19653"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-3073",
"datePublished": "2005-09-27T04:00:00.000Z",
"dateReserved": "2005-09-27T00:00:00.000Z",
"dateUpdated": "2024-08-07T23:01:57.694Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2004-0374 (GCVE-0-2004-0374)
Vulnerability from cvelistv5 – Published: 2004-04-06 04:00 – Updated: 2024-08-08 00:17
VLAI
EPSS
VEX
Summary
Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "__SQLUSER__" string.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://www.icdevgroup.org/pipermail/interchange-a… | mailing-listx_refsource_MLIST |
| http://www.securityfocus.com/bid/10005 | vdb-entryx_refsource_BID |
| http://ftp.icdevgroup.org/interchange/5.0/WHATSNEW | x_refsource_CONFIRM |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/11234 | third-party-advisoryx_refsource_SECUNIA |
| http://www.debian.org/security/2004/dsa-471 | vendor-advisoryx_refsource_DEBIAN |
Date Public
2004-04-02 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T00:17:14.558Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "[interchange-announce] 20040329 Security Problem in Interchange",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.icdevgroup.org/pipermail/interchange-announce/2004/000043.html"
},
{
"name": "10005",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/10005"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://ftp.icdevgroup.org/interchange/5.0/WHATSNEW"
},
{
"name": "interchange-url-obtain-information(15670)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15670"
},
{
"name": "11234",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/11234"
},
{
"name": "DSA-471",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2004/dsa-471"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-04-02T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Interchange before 5.0.1 allows remote attackers to \"expose the content of arbitrary variables\" and read or modify sensitive SQL information via an HTTP request ending with the \"__SQLUSER__\" string."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "[interchange-announce] 20040329 Security Problem in Interchange",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.icdevgroup.org/pipermail/interchange-announce/2004/000043.html"
},
{
"name": "10005",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/10005"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://ftp.icdevgroup.org/interchange/5.0/WHATSNEW"
},
{
"name": "interchange-url-obtain-information(15670)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15670"
},
{
"name": "11234",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/11234"
},
{
"name": "DSA-471",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2004/dsa-471"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-0374",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Interchange before 5.0.1 allows remote attackers to \"expose the content of arbitrary variables\" and read or modify sensitive SQL information via an HTTP request ending with the \"__SQLUSER__\" string."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "[interchange-announce] 20040329 Security Problem in Interchange",
"refsource": "MLIST",
"url": "http://www.icdevgroup.org/pipermail/interchange-announce/2004/000043.html"
},
{
"name": "10005",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/10005"
},
{
"name": "http://ftp.icdevgroup.org/interchange/5.0/WHATSNEW",
"refsource": "CONFIRM",
"url": "http://ftp.icdevgroup.org/interchange/5.0/WHATSNEW"
},
{
"name": "interchange-url-obtain-information(15670)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15670"
},
{
"name": "11234",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/11234"
},
{
"name": "DSA-471",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2004/dsa-471"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-0374",
"datePublished": "2004-04-06T04:00:00.000Z",
"dateReserved": "2004-03-29T00:00:00.000Z",
"dateUpdated": "2024-08-08T00:17:14.558Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}