CVE-2005-4304

CVE-2005-4304 affects ezDatabase versions up to 2.1.2 and earlier. The issue is triggered by an invalid cat_id parameter in index.php, leading to leakage of a full pathname in an error message. The description notes uncertainty about details due to report terminology problems and partial feedback...

CVE-2005-4303

CVE-2005-4303 affects ezDatabase 2.1.2 and earlier via a SQL injection in index.php where the db_id parameter enables remote attackers to execute arbitrary SQL commands. The vulnerability is documented with a High base score (7.5, NETWORK attack, no authentication) and partial impact on confident...

CVE-2005-3652

CVE-2005-3652 affects Citrix Program Neighborhood Client (9.0 and earlier). A heap-based buffer overflow occurs when processing Application Set responses containing a long name value, allowing remote code execution. Affected platforms include Windows 2000 and Windows XP. The issue is addressed by...

CVE-2005-4297

CVE-2005-4297 affects bbBoard 2.56 and earlier with a Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly via the "keys" parameter. The connected documents confirm the flaw and its basic vector bu...

CVE-2005-4300

CVE-2005-4300 : A format-string vulnerability was present in the lire_pop function of libremail

CVE-2005-4299

The CVE-2005-4299 entry documents a Cross-site scripting (XSS) vulnerability in Atlant Pro (atl.cgi) versions 4.02 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML by supplying values in the (1) before and (2) ct parameters. The core issue is an XSS in the Atla...

CVE-2005-4284

Cross-site scripting XSS vulnerability in StaticStore Search Engine 1.189A and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to search.cgi, possibly the keywords parameter. NOTE: this issue was originally disputed by the vendor, but it has since...

CVE-2005-4277

Cross-site scripting XSS vulnerability in index.php in toendaCMS before 0.7 Beta allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2005-4280

CVE-2005-4280 describes an untrusted search path vulnerability in CMake before 2.2.0-r1 on Gentoo Linux. A local user in the portage group can gain privileges by placing a malicious shared object in the Portage temporary build directory, which is included in the RUNPATH of the affected build. The...

CVE-2005-4277

CVE-2005-4277 is an XSS vulnerability in toendaCMS prior to 0.7 Beta. The flaw resides in index.php where the id parameter can be manipulated to inject arbitrary script/HTML, enabling remote attackers to execute client-side code. Affected product: toendaCMS (before 0.7 Beta). The provided documen...

CVE-2005-4278

CVE-2005-4278 is an Untrusted search path vulnerability affecting Perl prior to 5.8.7-r1 on Gentoo Linux. Local users in the portage group can gain privileges by placing a malicious shared object in the Portage temporary build directory, which is in RUNPATH. Connected advisories (GLSA 200510-14, ...

CVE-2005-4281

CVE-2005-4281 : XSS in Zaygo HostingCart 2.0 and earlier allows remote script/HTML injection via certain search module parameters, possibly the root parameter to zaygo.cgi. Affected: HostingCart versions 2.0 and earlier. Root cause: untrusted input in search-related parameters leading to script e...

CVE-2005-4275

CVE-2005-4275 affects the Scientific Atlanta DPX2100 Cable Modem. A remote attacker can cause a denial of service (device crash) by sending an IP packet with identical source and destination IPs and ports and the SYN flag set (LanD), demonstrated with hping2. The provenance is noted as unknown; d...

CVE-2005-4291

CVE-2005-4291 : A cross-site scripting (XSS) vulnerability exists in cart.cgi of ECTOOLS Onlineshop 1.0 and earlier. Arbitrary web script/HTML can be injected via the (1) product, (2) category, and (3) uid parameters. The available documents confirm the affected component is cart.cgi within ECTOO...

CVE-2005-4296

Technical details about CVE-2005-4296 are not provided in the connected documents or the initial description. Public information is limited to a denial‑of‑service via large HTTP requests for AppServ Open Project 2.5.3. Monitor for updates.

CVE-2005-4294

Alkacon OpenCms

CVE-2005-4284

CVE-2005-4284 describes a cross-site scripting (XSS) vulnerability in the StaticStore Search Engine up to version 1.189A. The flaw allows remote attackers to inject arbitrary script or HTML via parameters to search.cgi, possibly the keywords parameter, leading to user script execution in the cont...

CVE-2005-4290

The CVE-2005-4290 entry describes a cross-site scripting (XSS) vulnerability in ECW-Cart 2.03 and earlier, located in index.cgi. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the parameters (1) kword, (2) max, (3) min, (4) comp, and (5) f. Affected software ...

CVE-2005-4293

CVE-2005-4293 describes a Cross-site Scripting (XSS) flaw in CCP’s cp-app.cgi for ClickCartPro (CCP) 5.1 and earlier. The affl parameter is injectable and can lead to remote attackers injecting arbitrary web script or HTML in the affected web page. The public documentation in the NVD shows a CVSS...

CVE-2005-4286

The CVE-2005-4286 entry concerns PhpLogCon prior to 1.2.2. It describes an unspecified vulnerability that could allow remote attackers to use arbitrary profiles via unknown vectors, likely stemming from an SQL injection in submit.php affecting the pass and usr parameters. The available documents ...