CVE-2005-4286

The CVE-2005-4286 entry concerns PhpLogCon prior to 1.2.2. It describes an unspecified vulnerability that could allow remote attackers to use arbitrary profiles via unknown vectors, likely stemming from an SQL injection in submit.php affecting the pass and usr parameters. The available documents ...

CVE-2005-4279

CVE-2005-4279 describes a local untrusted search path vulnerability in Qt-UnixODBC before 3.3.4-r1 on Gentoo Linux, enabling a local user in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory (RUNPATH). Connected sources confirm the affecte...

CVE-2005-4282

Affected software: Zaygo DomainCart 2.0 and earlier. Vulnerability: Cross-site scripting (XSS) allowing remote injection of arbitrary script/HTML, possibly via the root parameter to zaygo.cgi. Impact (per sources): Confidentiality: none; Integrity: partial; Availability: none; Attack vector: netw...

CVE-2005-4283

CVE-2005-4283 is an XSS vulnerability in The CITY Shop 1.3 and earlier. Remote attackers can inject arbitrary script/HTML via parameters to the search module (possibly store.cgi). The NVD entry assigns a CVSS v2 base score of 4.3 (Medium), with network attack vector, no authentication, and partia...

CVE-2005-4285

The CVE-2005-4285 entry describes a Cross-site scripting (XSS) vulnerability in pdestore.cgi of PDEstore 1.8 and earlier. The underlying issue allows remote attackers to inject arbitrary web script or HTML through (1) the search module parameter or (2) the product and (3) cart_id parameters. The ...

CVE-2005-4287

CVE-2005-4287 affects MarmaraWeb E-commerce. The vulnerability is a PHP remote file include in index.php via the page parameter, enabling remote code execution. The issue stems from insufficient validation of the included file path, leading to arbitrary code execution with the web server. Connect...

CVE-2005-4288

CVE-2005-4288 refers to a Cross-site scripting (XSS) vulnerability in MarmaraWeb E-commerce, exploitable via the page parameter to index.php. The affected component is MarmaraWeb E-commerce (index.php), with the root cause described as improper handling of the page parameter that allows injection...

CVE-2005-4289

The CVE-2005-4289 entry describes a Cross‑site Scripting (XSS) vulnerability in EDCstore.pl of eDatCat 0.3. The flaw allows remote attackers to inject arbitrary web script or HTML via the user_action parameter. According to NVD, the impact is Partial Integrity with No Confidentiality or Availabil...

Mercury Mail Transport System 4.01b - PH SERVER Remote Overflow

mercurysexywarez Okayokay THiS iS 0DAY!!! Mercury Mail Transport System 4.01b REMOTE ROOT EXPLOIT PH SERVER since me and my folks didn't find enough wild targets, i release this pretty warez to the public :PP kcope kingcopeatgmx.net in 2005! JUUAREZ! Big thanx to...

phpXplorer XSS vuln.

phpXplorer XSS vuln. Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/phpxplorer-xss-vuln.html vendor:http://www.phpxplorer.org/ affected version:0.9.12 and prior Product Description: phpXplorer is a free open source file management system / explor...

eDatCat XSS vuln.

eDatCat XSS vuln. Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/edatcat-xss-vuln.html vendor:http://www.edatcat.com/ affected version: v3.0 and prior Product Description: eDatCat is a fully customizable database and shopping cart system. Feature...

iDefense Security Advisory 12.14.05: Trend Micro ServerProtect EarthAgent Remote DoS Vulnerability

Trend Micro ServerProtect EarthAgent Remote DoS Vulnerability iDefense Security Advisory 12.14.05 www.idefense.com/application/poi/display?id=356&type=vulnerabilities December 14, 2005 I. BACKGROUND Trend Micro Inc.'s ServerProtect provides antivirus scanning with centralized management of virus...

ClickCartPro (CCP) XSS vuln.

ClickCartPro CCP XSS vuln. Vuln. discovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/clickcartpro-ccp-xss-vuln.html vendor:http://www.clickcartpro.com/ affected version:5.1 and prior Product Description: CCP is a full featured shopping cart engine that will...

[OpenPKG-SA-2005.029] OpenPKG Security Advisory (apache)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory The OpenPKG Project http://www.openpkg.org/security.html http://www.openpkg.org [email protected] [email protected] OpenPKG-SA-2005.029 14-Dec-2005 Package: apache Vulnerability: cross site scripting OpenPKG...

CVE-2005-4274

CVE-2005-4274 affects Business Objects WebIntelligence 6.5x. The vulnerability permits remote attackers to cause a denial of service (user account lockout) via unknown attack vectors related to authentication mechanisms and form input. The available sources describe the issue but do not provide c...

CVE-2005-4271

The CVE-2005-4271 entry describes a buffer overflow in the malloc debug system on IBM AIX 5.3 that allows local users to execute arbitrary code. Affected component: AIX 5.3 malloc debug subsystem. Root cause: buffer overflow in the malloc debug mechanism (as per NVD description). Impact: local pr...

CVE-2005-4272

CVE-2005-4272 affects IBM AIX 5.1, 5.2, and 5.3. The vulnerability involves multiple buffer overflows in the affected components muxatmd and slocal, enabling remote code execution. The provided connected documents do not specify a vendor fix or remediation steps; no exploitation status is indicat...

CVE-2005-4270

CVE-2005-4270 affects Watchfire AppScan QA versions 5.0.609 and 5.0.134. A buffer overflow in handling an HTTP 401 response with a WWW-Authenticate header containing a long Realm field can allow a remote attacker to execute arbitrary code. The vulnerability is documented with a remote-code-execut...

CVE-2005-4269

The affected component is mshtml.dll in Microsoft Windows XP, Windows Server 2003, and Internet Explorer 6.0 SP1. The issue arises when mshtml.dll processes button-focus events while a document is reloading, leading to a denial of service (access violation). This is observed in Microsoft Office I...

CVE-2005-4268

CVE-2005-4268 is a buffer overflow vulnerability in GNU cpio, reported on 64-bit platforms when creating archives. The issue arises from handling a file size represented by more than 8 digits, enabling a local user to crash the cpio process and potentially gain code execution. Public details acro...