CVE-2005-4360

Summary (CVE-2005-4360, mode C) : IIS 5.1 on Windows XP Pro SP2 contains a memory/URL parsing vulnerability in the IIS WWW component. A remote attacker can trigger it by sending specially crafted URLs (notably using paths like /_vti_bin/.dll/*/~0), leading to remote code execution with SYSTEM pri...

CVE-2005-4358

CVE-2005-4358 affects phpBB 2.0.18. The vulnerability is in admin/admin_disallow.php where a direct request with a non-empty setmodules parameter leads to an invalid append_sid function call that leaks the installation path in an error message. Impact: remote attackers can obtain the path to the ...

CVE-2005-4358

admin/admindisallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path via a direct request with a non-empty setmodules parameter, which causes an invalid appendsid function call that leaks the path in an error message...

CVE-2005-4365

CVE-2005-4365 describes multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029. An attacker can inject arbitrary web script or HTML via the name parameter in text.php and the frame parameter in forum.php. This document set confirms the affected product and the vulnerable parameter...

CVE-2005-4355

CVE-2005-4355 : The data shows multiple cross-site scripting (XSS) vulnerabilities in the UStore web application. The issues affect parameters in the public and admin interfaces: (1) the Cat parameter in default.asp and (2) the accessdenied parameter in admin/default.asp. The root cause is improp...

CVE-2005-4359

CVE-2005-4359 describes an SQL injection in ODFaq 2.1.0, exploitable via the (1) cat and (2) srcText parameters to faq.php, affecting includes/core.inc.php. The vulnerability could allow remote attackers to execute arbitrary SQL commands, with partial confidentiality and partial integrity impacts...

CVE-2005-4362

The CVE-2005-4362 entry concerns a SQL injection vulnerability in Komodo CMS 2.1, exploitable via the page parameter in page.php. The vulnerability could allow remote attackers to execute arbitrary SQL commands. According to NVD, the impact is partial integrity loss with no confidentiality or ava...

CVE-2005-4354

CVE-2005-4354 is a documented XSS vulnerability in Webglimpse 2.14.1 and earlier, exploitable via the query parameter on webglimpse.cgi. The connected documents do not provide explicit exploit details, affected versions beyond the stated range, or concrete remediation steps. The NVD entry notes a...

CVE-2005-4354

Cross-site scripting XSS vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2005-4363

Cross-site scripting XSS vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...

CVE-2005-4367

The CVE-2005-4367 entry describes an XSS in DRZES HMS 3.2 (and later CONTROLzx, renamed from DRZES, 3.3.4) via register_domain.php, likely through unspecified search parameters (potentially the Domain Availability field). Affected function is register_domain.php; root cause is improper handling/e...

CVE-2005-4357

CVE-2005-4357 is a cross-site scripting (XSS) vulnerability in phpBB when the “Allowed HTML tags” feature is enabled. The issue allows remote attackers to inject arbitrary JavaScript via a permitted HTML tag that includes characters like " and active attributes such as onmouseover, effectively ex...

CVE-2005-4364

The CVE-2005-4364 entry describes a Cross-site scripting (XSS) vulnerability in the Hot Banana Web Content Management Suite 5.3, specifically in index.cfm where the keywords parameter can be exploited to inject arbitrary web script or HTML. The accompanying data indicates an impact on confidentia...

CVE-2005-4361

Magnolia Content Management Suite 2.1 is affected by a cross-site scripting (XSS) vulnerability in search.html that allows an attacker to inject arbitrary script or HTML via the query parameter. The issue is described across multiple sources (NVD and CVE records) with the vulnerability specifical...

CVE-2005-4355

Multiple cross-site scripting XSS vulnerabilities in UStore allow remote attackers to inject arbitrary web script or HTML via the 1 Cat parameter in default.asp and the 2 accessdenied parameter in admin/default.asp. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2005-4363

The CVE-2005-4363 entry describes a Cross-site scripting (XSS) flaw in Komodo CMS 2.1, specifically in the search engine. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. The NVD metrics list a base score of 5.8 (Medium) with netw...

BrightStor ARCserve Backup agent for MS-SQL buffer overflow

Added: 12/20/2005 CVE: CVE-2005-1272 BID: 14453 OSVDB: 18501 Background BrightStor ARCserve Backup is a backup and recovery solution for multiple platforms. Problem A buffer overflow in the backup agent for Microsoft SQL Server allows remote attackers to execute arbitrary commands. Resolution App...

Fedora Core 4 : xpdf-3.01-0.FC4.5 (2005-1169)

Several flaws were discovered in Xpdf. An attacker could construct a carefully crafted PDF file that could cause xpdf to crash or possibly execute arbitrary code when opened. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-3193 to these issues. Users of xpdf should...

Fedora Core 3 : xpdf-3.01-0.FC3.4 (2005-1170)

Several flaws were discovered in Xpdf. An attacker could construct a carefully crafted PDF file that could cause xpdf to crash or possibly execute arbitrary code when opened. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-3193 to these issues. Users of xpdf should...

CVE-2005-4353

The CVE-2005-4353 entry describes an SQL injection in toendaCMS 0.6.2.1 when configured to use a SQL database. The vulnerability occurs in index.php and allows remote attackers to alter or extract data by injecting arbitrary SQL through the id parameter. Affected product: toendaCMS 0.6.2.1 (SQL-e...