CVE-2005-4232

SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the vendor has disputed this issue, saying "The vulnerability is without any basis and did not actually work." CVE has not verified...

CVE-2005-3703

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2272. Reason: This candidate is a duplicate of CVE-2005-2272. It was reserved when another candidate was already public. Notes: All CVE users should reference CVE-2005-2272 instead of this candidate. All references and...

CVE-2005-4232

SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the vendor has disputed this issue, saying "The vulnerability is without any basis and did not actually work." CVE has not verified...

CVE-2005-4252

CVE-2005-4252 describes a cross-site scripting (XSS) vulnerability in mcGallery PRO 2.2 and earlier . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters of the search module. The NVD entry records a CVSS v2 base score of 4.3 (Medium) with attack ve...

CVE-2005-4215

Motorola SB5100E Cable Modem is affected by a LAND-style denial-of-service described in CVE-2005-4215. The vulnerability is triggered by receiving an IP packet where the source and destination IPs and ports are identical, with the SYN flag set, causing the device to crash. The available documents...

CVE-2005-4235

CVE-2005-4235 describes a cross-site scripting (XSS) vulnerability in knowledgebase.php of WHMCompleteSolution 2.1 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via the search parameters, affecting the affected WHMCompleteSolution product. No remediation det...

CVE-2005-3703

...

CVE-2005-4217

Perl in Apple Mac OS X Server 10.3.9 does not properly drop privileges when using the "$" variable to set uid, which allows attackers to gain privileges...

CVE-2005-4235

Cross-site scripting XSS vulnerability in knowledgebase.php in WHMCompleteSolution 2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameters...

CVE-2005-4222

CVE-2005-4222 describes multiple cross-site scripting (XSS) vulnerabilities in the guestbook.cgi module of Lars Ellingsen Guestserver 4.13 and earlier. The issue is triggered in the guestbook.cgi code via unspecified message fields, allowing remote attackers to inject arbitrary web script or HTML...

CVE-2005-4251

CVE-2005-4251 affects mcGallery PRO 2.2 and earlier, with multiple SQL injection flaws that allow remote execution of arbitrary SQL via parameters (id, start, rand in show.php; album in index.php). The vulnerability is documented in the NVD entry and related CVE references; base score 7.5 (High) ...

CVE-2005-2829

CVE-2005-2829 corresponds to a File Download Dialog Box Manipulation vulnerability in Microsoft Internet Explorer 5.01/5.5/6 that could allow remote code execution via attacker‑supplied content and user interaction. Exploitation involves overlaying a malicious dialog and delaying the Run/Open act...

CVE-2005-4212

Directory traversal vulnerability in coinincludes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary local files via ".." dot dot sequences in the $CCFGPKGPATHDBSE variable...

CVE-2005-3703

CVE-2005-3703 is rejected/not used and does not represent an active vulnerability entry.

CVE-2005-4233

The CVE-2005-4233 entry describes an SQL injection vulnerability in advertiser_statistic.php for Ad Manager Pro 2.0 and earlier, where the ad_number parameter can be manipulated to execute arbitrary SQL commands. The vulnerability is exploitable remotely, leading to potential data exposure or mod...

CVE-2005-4239

The connected documents confirm CVE-2005-4239 is an XSS vulnerability in PHP JackKnife (2.21 and earlier) affecting Search/DisplayResults.php via URL-encoded sKeywords. Exploitation details are not expanded beyond the provided description; no explicit patch/version remediation is documented in th...

CVE-2005-4246

Plogger Beta 2 and earlier are affected by a SQL injection vulnerability. The issue allows remote attackers to inject arbitrary SQL commands via the (1) id parameter to index.php and (2) the page parameter, indicating input unsanitization in the application’s query construction. The observed impa...

CVE-2005-3903

CVE-2005-3903 documents a local privilege escalation in SCO Unixware 7.1.3 and 7.1.4 caused by a buffer overflow in the setuid binary uidadmin when processing a long -S (scheme) argument that specifies a large file. The vulnerability arises from a failure to bound the input length, enabling a loc...

CVE-2005-4241

The CVE-2005-4241 issue affects VCD-db 0.98 and earlier, with a Cross-site Scripting (XSS) vulnerability on the category page exploited via the batch parameter. Remote attackers could inject arbitrary script/HTML. This entry is supported by multiple sources noting XSS in VCD-db and the affected v...

CVE-2005-2831

CVE-2005-2831 affects Microsoft Internet Explorer 5.01, 5.5 and 6 via a Memory Corruption in the COM object instantiation process when a page embeds certain CLSIDs. An attacker could host a malicious page that causes remote code execution by instantiating COM objects not intended for IE, potentia...