1284 matches found
CVE-2005-4230
SQL injection vulnerability in poll.php in Link Up Gold 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the number parameter...
CVE-2005-4230
SQL injection vulnerability in poll.php in Link Up Gold 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the number parameter...
CVE-2005-4231
The CVE-2005-4231 entry relates to a cross-site scripting (XSS) flaw in Link Up Gold 2.5 and earlier. The vulnerability arises from injectable input in multiple vectors: (1) the link parameter to tell_friend.php, (2) the phrase[] parameter to search.php in a search_links_advanced action, and (3)/...
CVE-2005-4073
SQL injection vulnerability in viewarchive.cfm in CFMagic Magic List Pro 2.5 allows remote attackers to execute arbitrary SQL commands via the ListID parameter...
Magic Forum Personal - view_thread.cfm Multiple SQL Injections
Magic Forum Personal - viewthread.cfm Multiple SQL Injections source: https://www.securityfocus.com/bid/15774/info CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. These vulnerabilities allow an attacke...
Magic Forum Personal - view_forum.cfm?ForumID SQL Injection
Magic Forum Personal - viewforum.cfm?ForumID SQL Injection source: https://www.securityfocus.com/bid/15774/info CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. These vulnerabilities allow an attacker t...
Magic List Pro - view_archive.cfm?ListID SQL Injection
Magic List Pro - viewarchive.cfm?ListID SQL Injection source: https://www.securityfocus.com/bid/15774/info CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. These vulnerabilities allow an attacker to...
Magic Forum Personal - 'view_forum.cfm?ForumID' SQL Injection
source: https://www.securityfocus.com/bid/15774/info CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. These vulnerabilities allow an attacker to inject malicious SQL code into database queries, and...
Kcms Profile Server
The Kodak Color Management System service is running. The KCMS service on Solaris 2.5 could allow a local user to write to arbitrary files and gain root access. This warning may be a false positive since the presence of the bug has not been tested. Patches: 107337-02 SunOS 5.7 has been released a...
Kcms Profile Server
The Kodak Color Management System service is running. The KCMS service on Solaris 2.5 could allow a local user to write to arbitrary files and gain root access. Patches: 107337-02 SunOS 5.7 has been released and the following should be out soon: 111400-01 SunOS 5.8, 111401-01 SunOS 5.8x86...
CVE-2005-3258
The rfc1738doescape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service segmentation fault via certain "odd" responses...
Fedora Core 3 : squid-2.5.STABLE9-1.FC3.4 (2005-276)
Wed Mar 23 2005 Jay Fenlason 7:2.5.STABLE9-1.FC3.4 - Add more upstream patches. - add the -libbind patch, to avoid picking up a new dependency on libbind. - Remove references to /etc/squid/errors from this spec, since squid now uses datadir/squid/errors/English/ by default overridable in...
CVE-2005-2665
Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitrary code via an e-mail message with a long Expires header...
CVE-2005-2665
Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitrary code via an e-mail message with a long Expires header...
CVE-2005-2665
Elm contains a stack-based buffer overflow in expires.c that affects Elm 2.5 PL5–PL7 (and possibly other versions). A crafted email with a long Expires header can allow a remote attacker to execute arbitrary code with the user’s privileges. Public advisories (RHSA-2005:755, CESA-2005:755) note a ...
CMSimple < 2.5 Beta 3 Search Function XSS
Binary data 3103.prm...
CVE-2005-2253
CVE-2005-2253 is a SQL injection in PhpAuction 2.5, where an attacker can modify SQL queries through the category parameter in adsearch.php. Root cause: unsanitized input used in database queries. Affected: PhpAuction 2.5. Impact: as described by CVE/NVD (base score 7.5, HIGH). Exploitation detai...
phpAuction 2.5 - Multiple Vulnerabilities
phpAuction 2.5 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/14184/info PHPAuction is affected by multiple remote vulnerabilities. These issues can allow an attacker to gain unauthorized access to a site and carry out SQL injection and cross-site scripting attacks. PHPAucti...
CVE-2002-1942
Imatix Xitami 2.5 b5 is affected. The issue is that the product does not properly terminate certain Keep-Alive connections that have been broken or closed early, which can allow remote attackers to cause a denial of service (crash) through a large number of concurrent sessions. The vulnerability ...