CVE-2005-4419

Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 series, 2 catparent, 3 cat, and 4 div parameters...

CVE-2005-4415

Cross-site scripting XSS vulnerability in index.php in TML CMS 0.5 allows remote attackers to inject arbitrary web script or HTML via the form parameter...

CVE-2005-4397

CVE-2005-4397 describes an SQL injection vulnerability in iCMS’s RunScript.asp where the Event_ID parameter enables remote attackers to execute arbitrary SQL commands. Public references (OSVDB, Secunia, NVD) list a CVSS v2 base score of 7.5 (HIGH) with network access, no authentication, and parti...

CVE-2005-4410

CVE-2005-4410 concerns an Cross-site Scripting (XSS) vulnerability in NQcontent 3. The issue allows remote attackers to inject arbitrary web script or HTML through unspecified search parameters, possibly the text parameter. The available documents identify NQcontent 3 as the affected product and ...

CVE-2005-4398

The CVE-2005-4398 entry concerns lemoon 2.0 and earlier, with a cross-site scripting (XSS) vulnerability. The root cause is a flaw in a UserControl that handles form input, which is part of a custom site built on lemoon rather than the lemoon core product. Impact stated: ability for remote attack...

CVE-2005-4421

Dev-Editor 3.0 is affected by a directory traversal vulnerability: remote attackers can access directories outside the web root whose names are substrings of the web root directory. This CVE (CVE-2005-4421) is rated CVSSv2 base score 7.5 (HIGH) with network attack vector, low attack complexity, n...

CVE-2005-4401

CVE-2005-4401 describes a cross-site scripting (XSS) vulnerability in Lutece 1.2.3 and earlier. The affected component is the Lutece web application, with the root cause described as an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters,...

CVE-2005-4390

The CVE-2005-4390 entry affects ContentServ 3.1 and earlier, where the index.php StoryID parameter is vulnerable to SQL injection. Remote attackers could potentially execute arbitrary SQL commands due to this flaw. The available documents state the vulnerability but do not provide exploitation de...

CVE-2005-4416

The CVE-2005-4416 issue affects TML CMS 0.5 and is caused by a SQL injection in the index.php file, allowing remote attackers to insert or alter SQL commands via the id parameter . The available sources (NVD/CVE records) report this as a direct vulnerability with the impact of enabling partial co...

CVE-2005-4403

SQL injection vulnerability in index.php of Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the show parameter. Affected software: Marwel (version 2.7 and earlier). Underlying issue: unsafeguarded SQL construction via user-supplied show parameter. CVSS details...

CVE-2005-4422

CVE-2005-4422 affects toendaCMS prior to 0.6.2 Stable. The vulnerability is an unrestricted file upload that lets remote authenticated administrators execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request to data/images/albums. The issue...

CVE-2005-4425

Kerio WinRoute Firewall prior to version 6.1.3 is affected by a vulnerability that allows remote attackers to cause a denial of service (crash) via certain RTSP streams. The issue appears in the version range before 6.1.3; exact root cause is not detailed in the provided documents. Public referen...

CVE-2005-4420

CVE-2005-4420 describes a cross-site scripting (XSS) vulnerability in Honeycomb Archive Enterprise 3.0. The issue allows remote attackers to inject arbitrary web script or HTML by manipulating unspecified search parameters (possibly the keyword parameter in search.cfm). The provided CVSS details ...

CVE-2005-4391

CVE-2005-4391 is a Cross-site scripting (XSS) vulnerability in damoon that could let remote attackers inject arbitrary web script or HTML via unspecified search parameters, possibly the q parameter. The NVD entry assigns a CVSSv2 base score of 4.3 (Medium) with vector AV:N/AC:M/Au:N/C:N/I:P/A:N. ...

CVE-2005-4415

CVE-2005-4415 describes a cross-site scripting (XSS) vulnerability in index.php of TML CMS 0.5 , allowing remote attackers to inject arbitrary web script or HTML via the form parameter. The known impact is partial integrity loss and potential user-script execution, with the CVSS base score of 4.3...

CVE-2005-4412

The CVE-2005-4412 issue affects Citrix Program Neighborhood client prior to 9.150, where the user password is cached in plaintext in the GUI while asterisks visually obfuscate it. An attacker with access to the session can retrieve the password by directly accessing the password field. No explici...

CVE-2005-4414

Technical details for CVE-2005-4414 are not publicly available in the provided documents. Monitor for updates.

CVE-2005-4409

CVE-2005-4409 is a cross-site scripting (XSS) vulnerability in MMBase 1.7.4 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. Affected component: MMBase (version 1.7.4 and earlier). Root cause: unsafeguarded handling of user-su...

CVE-2005-4404

The CVE-2005-4404 entry describes an SQL injection vulnerability in default.asp for Media2 CMS Shop 18.x. The vulnerability is exploitable via the item parameter, allowing remote attackers to execute arbitrary SQL commands. The root cause described across sources is unsafe handling/concatenation ...

CVE-2005-4411

CVE-2005-4411 describes a stack-based buffer overflow in Mercury Mail Transport System’s Phone Book (PH) service running on TCP port 105. The flaw arises from insufficient bounds checking when handling user-supplied data in the PH Server Module, enabling remote code execution on affected Windows ...