10533 matches found
CVE-2005-4375
CVE-2005-4375 describes a cross-site scripting (XSS) vulnerability in Amaxus 3 and earlier, exploitable via the change parameter. The issue is documented by NVD with a MEDIUM base score (CVSS2: 4.3) and notes it may be related to CVE-2005-4376. The connected records also include a related CVE (CV...
CVE-2005-4373
The CVE concerns Adaptive Website Framework (AWF) ≤ 2.10. The vulnerability arises from an invalid mode parameter to community.html, which causes an error message that leaks the full path of the application. This is a path disclosure affecting confidentiality (partial). The available sources (NVD...
CVE-2005-4375
Cross-site scripting XSS vulnerability in Amaxus 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the change parameter. NOTE: it is possible that this is resultant from CVE-2005-4376...
CVE-2005-4377
Cross-site scripting XSS vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 PageID and 2 SiteNodeID parameters...
CVE-2005-4382
The CVE-2005-4382 entry describes an SQL injection vulnerability in CitySoft Community Enterprise 4.x. The vulnerability allows remote attackers to execute arbitrary SQL commands by supplying crafted values for (1) nodeID, (2) pageID, (3) ID, (4) parentid parameters to index.cfm and (5) documentF...
CVE-2005-4380
Bitweaver 1.1 and 1.1.1 beta contain multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL commands via unsafely handled input in sort_mode (fisheye/list_galleries.php, messages/message_box.php, users/my.php), post_id (blogs/view_post.php), and blog_id (blogs/v...
CVE-2005-4383
CVE-2005-4383 describes a cross-site scripting (XSS) vulnerability in CitySoft Community Enterprise 4.x, specifically in index.cfm. The vulnerability arises via multiple parameters (presentationSite, docPublishYear, docDescription, publishState, docAuthor, docTitle, subTopic, topic, topicRadio, t...
CVE-2005-4387
A CVE-2005-4387 entry describes a Cross-site Scripting (XSS) vulnerability in contenite 0.11 and earlier, exploitable via the id parameter in home.php. The vulnerability allows remote attackers to inject arbitrary web scripts or HTML. The provided documents do not specify a fixed patch version or...
CVE-2005-4386
The CVE-2005-4386 entry concerns a Cross-site scripting (XSS) vulnerability in Colony CMS versions 2.75 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML through unspecified search parameters, indicating an input handling/root-cause weakness in the search param...
CVE-2005-4379
Bitweaver 1.1 and 1.1.1 beta are affected by multiple cross-site scripting (XSS) vulnerabilities. The issues allow remote attackers to inject arbitrary web script or HTML via specific parameters: (1) sort_mode in fisheye/list_galleries.php, messages/message_box.php, and users/my.php; (2) post_id ...
CVE-2005-4368
CVE-2005-4368 affects Roundcube Webmail Alpha. When rcube_config['debug_level'] is set to 1 (default high verbose), an attacker can trigger an invalid_task to cause an error message that discloses the full application path. The available connected documents confirm the vulnerability description a...
CVE-2005-4388
CVE-2005-4388 describes a cross-site scripting (XSS) vulnerability in the search.cfm component of CONTENS 3.0 and earlier . The issue arises from insufficient input validation, allowing remote attackers to inject arbitrary web script or HTML via the near parameter. Affected software is CONTENS 3....
CVE-2005-4378
CVE-2005-4378 is a SQL injection vulnerability in Page.asp of Baseline CMS 1.95 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter. The reported CVSS v2 base score is 7.5 (HIGH) with network access, low attack complexity, and no authentica...
CVE-2005-4381
CVE-2005-4381 concerns Caravel CMS 3.0 Beta 1 and earlier, with multiple XSS vulnerabilities exploitable through the parameters fileDN and folderviewer_attrs . The affected component is the Caravel CMS web application; the root cause is improper handling of user-supplied input in these parameters...
CVE-2005-4374
CVE-2005-4374 : Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) s parameter to faq.asp and (2) searchQuery parameter to search.asp. Affected software: Allinta 2.3.2 and earlier. Root cause: ...
CVE-2005-4358
admin/admindisallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path via a direct request with a non-empty setmodules parameter, which causes an invalid appendsid function call that leaks the path in an error message...
CVE-2005-4358
admin/admindisallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path via a direct request with a non-empty setmodules parameter, which causes an invalid appendsid function call that leaks the path in an error message...
CVE-2005-4360
The URL parser in Microsoft Internet Information Services IIS 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "0" through "9", which causes ntdll.dll to produce a return value that is not correctly...
CVE-2005-4357
Cross-site scripting XSS vulnerability in phpBB 2.0.18, when "Allowed HTML tags" is enabled, allows remote attackers to inject arbitrary Javascript via a permitted HTML tag with " quote characters and active attributes such as onmouseover...