CVE-2005-4320

CVE-2005-4320 affects Limbo CMS versions 1.0.4.2 and earlier. The vulnerability allows remote attackers to obtain the installation path by requesting one of three files—doc.inc.php, element.inc.php, or node.inc.php—causing a path disclosure in an error message. OpenVAS/NASL details corroborate th...

CVE-2005-4316

CVE-2005-4316 describes a remote DoS against HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 caused by a crafted subset of small IP fragments that do not form a complete packet (Rose Attack). The connected Nessus/NVT content confirms multiple HP-UX TCP/IP DoS-related patches tied to this CVE (e.g., ...

CVE-2005-4323

CVE-2005-4323 describes an unspecified vulnerability in Hitachi Cosminexus Collaboration Portal (versions 06-00 through 06-10-/B), Groupmax Collaboration Portal (07-00 through 07-10-/B), and Groupmax Collaboration Web Client (07-00 through 07-10-/A) that allows remote attackers to cause a denial ...

CVE-2005-4331

The CVE-2005-4331 entry describes a SQL injection vulnerability in the iHTML Merchant Version 2 Pro product, specifically in merchant.ihtml. The vulnerability allows remote attackers to execute arbitrary SQL commands through the (1) step, (2) id, and (3) pid parameters. This is evidenced by the N...

CVE-2005-4328

Webglimpse 2.14.1 and earlier is affected by an XSS in webglimpse.cgi, exploitable via the ID parameter to inject arbitrary script/HTML. Remote attackers could exploit this to achieve script execution in the vulnerable web page. The description does not specify patched versions or remediation ste...

CVE-2005-4324

Hitachi Groupmax Mail SMTP versions 06-50 to 06-52-/A and 07-00 to 07-20 are affected by CVE-2005-4324, which permits remote DoS through an email with an invalid format. The provided documents do not specify root cause details, affected component names beyond the SMTP service, exact exploit vecto...

CVE-2005-4333

CVE-2005-4333 affects Binary Board System (BBS) 0.2.5 and earlier. It describes multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML through parameters to reply.pl (1) inreplyto, (2) article, (3) board; and to (b) stats.pl, and to ...

CVE-2005-4314

Cross-site scripting XSS vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 stop and 2 user parameters...

CVE-2005-4310

Affected product : SSH Tectia Server

CVE-2005-4314

CVE-2005-4314 describes a cross-site scripting (XSS) vulnerability in the ppcal.cgi component of PPCal Shopping Cart 3.3.0 and earlier. The vulnerability allows an attacker to inject arbitrary web script or HTML via the (1) stop and (2) user parameters. Evidence from NVD states a medium severity ...

CVE-2005-4306

CVE-2005-4306 describes multiple XSS vulnerabilities in SiteNet BBS 2.0 and earlier. The issues arise in the handling of user-supplied input to netboardr.cgi via the parameters (pg, tid, cid, fid) and to search.cgi via the cid parameter, allowing remote attackers to inject arbitrary web script or...

CVE-2005-4313

CVE-2005-4313 concerns a SQL injection in the AlmondSoft Almond Personals 4.05 product. The vulnerability is in the file index.php and is exploitable by supplying an arbitrary value for the id parameter, enabling remote attackers to execute arbitrary SQL commands. The vulnerability is described a...

CVE-2005-4305

Cross-site scripting XSS vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page...

CVE-2005-4315

CVE-2005-4315 involves a SQL injection in the search function of Plexum PLEXCART X3. The vulnerability could allow a remote attacker to execute arbitrary SQL commands via unspecified vectors, with possible involvement of the s_itemname and s_orderby parameters to plexcart.pl. The NVD entry lists ...

CVE-2005-4305

CVE-2005-4305 describes a cross-site scripting (XSS) vulnerability in Edgewall Trac versions 0.9, 0.9.1, and 0.9.2 where un-sanitized URL data is reflected in an error page. The root cause is inadequate sanitization of URL input, enabling remote attackers to inject arbitrary script or HTML. Publi...

CVE-2005-4309

CVE-2005-4309 concerns ezUpload Pro 2.2 and earlier. The vulnerability is an SQL injection in the application’s search module parameters, allowing remote attackers to execute arbitrary SQL commands. The available documents confirm the affected product (ezUpload Pro 2.2 and earlier) and the root c...

CVE-2005-4311

DCForum 6.25 and earlier (and possibly DCForum+ 1.x) are affected by a Cross-site Scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary scripts via the page parameter in dcboard.php and via unspecified search parameters. Public references indicate an XSS with a CVSS...

CVE-2005-4311

Cross-site scripting XSS vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via 1 the page parameter in dcboard.php and 2 unspecified search parameters...

CVE-2005-4302

The CVE-2005-4302 entry concerns a directory traversal vulnerability in ezDatabase

CVE-2005-4312

The CVE-2005-4312 entry describes an SQL injection vulnerability in AlmondSoft Almond Classifieds 5.02, exploitable via the id parameter in index.php. The affected component is the web application’s index.php handling of id values, enabling remote attackers to inject SQL commands. CVSS2 context f...